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CleverPath™ Portal. Access for anyone. Any time. Anywhere. 


A completely personalized, totally secure workspace for each employee that's secmlessly 
integrated with your entire extended enterprise? Hubba hubba! Introducing CleverPatn Portal, 
a revolutionary new approach to portal technology that provides end users with a space 
where they can do more than just view information. They can actually use it. It's the first 
drag-and-drop end-user interface. It supports more platforms and more databases than 
anyone else. And it automatically supports a multitude of languages. All of which means 
that global implementation will be a breeze. And that should really turn you on. 



Computer Associates™ 


HELLO TOMORROW 


WE ARE COMPUTER ASSOCIATES | THE SOFTWARE THAT MANAGES eBUSINESS 
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IBM IntelliStation M Pro 
(monitor sold separately) 


\ Create a new world in five days, 
instead of the usual six. 


Bring your ideas to life faster than ever before with an 
IBM IntelliStation® workstation. From the creation of 
virtual realities to highly interactive Web sites - you need a 
machine that can keep pace with your imagination. Luckily, 
IBM IrtelliStation is certified to run over 200 applications - 
including Avid, Alias/Wavefront and Discreet. 1 Plus, its 
continuous tuning enables your apps to run at optimum 
speed. In fact, IBM IntelliStation swept ten of ten SPECopc 
performance tests three times in the past two years 2 - 
putting it in its rightful place as master of its universe. 

Add Adobe Web Collection for just $699. 3 Simply ask 
for Adobe Web Collection when you purchase any 
IBM IntelliStation M Pro, and you’ll get it for just $699. 
That’s a savings of about $300 off the Adobe Web price. 

Offer expires March 31,2002. Does not include shipping and handling. 

May not be combined with other offers or promotions. Valid from IBM in the 
US only while supplies last. Limit one per qualifying order. 10 per customer. 
Adobe Web Collection. Part #SEADBEZ 
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IBM IntelliStation E Pro 

Affordable workstation power 

Intel® Pentium "4 processor 1.80GHz 

128MB ECC memory 

Matrox G450 graph cs 

40GB 4 ATA/100 EIDE hard drive (7200 rpm) 

48X 5 max CD-ROM 

Microsoft" Windows 2000 Professional 

3-year parts and onsite 
labor limited warranty 6 

* 1,389 621420U-M400 

Customize Yours: 

256MB 133MHz ECC SDRAM 

(Part #10K0046) $149 


IBM IntelliStation M Pro 

Exceptional workstation performance 

Intel Xeon™ processor 2.0GHz 

256MB ECC memory 

Matrox G450 graphics 

40GB ATA/100 EIDE hard drive (7200 rpm) 

48X max CD-ROM 

Microsoft Windows 2000 Professional 

3-year parts and onsite 
labor limited warranty 

$0 OCO NavCode 

JL 3 O 05# 685030U-M400 

Customize Yours: 

Additional Intel Xeon Processor 1.70GHz 

(Part #24P8402) $599 


Call 1 866 426-9332 or 

Click www.ibm.com/intellistation/M400 

to buy direct, locate an IBM reseller or for more information. 

NavCode " Get the latest pricing and information fast. Use NavCode on the phone or on the Web. 


Looking for Microsoft® Office XP 7 or 2000 Small Business on the IBM PCs use genuine Microsoft® Windows® 

system you want? Simply contact us to order it at an additional cost. www.microsoft.com/piracy/howtotell 

For non-IBM software, applicable third-party licenses may apply. Warranty, service and support for non-IBM products, if any, are provided by third parties, not IBM. IBM makes no representations or warranties regarding non-IBM products. 
Standard Performance Evaluation Corp., July 2000. March 2001 and August 2001. ‘‘Prices do not include tax or shipping and are subject to change without notice. Reseller prices may vary. 'GB = 1.000.000.000 bytes when referring to storage 
capacity: accessible capacity is less. TO and DVD drives list maximum rates: rates are variable and are often less than the maximum. ‘For a cop; of IBM's Statement of Limited Warranty, call 1 800 772-2227. Telephone support may be subject 
to additional charges For onsite labor IBM will attempt to diagnose and resolve the problem remotely before sending a technician. Certain Mic osoft software product(s) included with this computer may use technological measures for copy 
protection IN SUCH EVENT. YOU WILL NOT BE ABLE TO USE THE PRODUCT IF YOU DO NOT FULLY COMPLY WITH THE PRODUCT ACTIVATION PROCEDURES Product activation procedures and Microsoft's privacy policy will be detailed 
during initial launch of the product, or upon certain reinstallations of the software product(s) or reconfigurations of the computer, and may be completed by Internet or telephone (toll charges may apply). All offers subject to availability. IBM reserves 
the right to alter product offerings and specifications at any time, without notice. IBM cannot be responsible for photographic or typographic errors. IBM makes no representations or warranties regarding third-party products or services. All IBM 
product names are registered trademarks or trademarks of International Business Machines Corporation. Intel, Intel Inside, the Intel Inside logo anc Pentium are registered trademarks and Xeon is a trademark of Intel Co-poration or its subsidiaries 
in the United States and other countries. Microsoft and Windows are registered trademarks of Microsoft Corporation. Other company, product and service names may be trademarks or service marks of others. ©2001 IBM Corp. All rights reserved. 
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By Bret A. Fausett The USA PATRIOT Act may 
toe the line of constitutionality, but so far no one has 
challenged it. Find out what it means for your business. 
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Streaming Media? 

By Molly Wright Steenson Streaming 
media has the power to tell stories and enhance experi¬ 
ences for many types of sites and companies. But it can 
also fall flat and confuse users. 
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Ogg Vorbis 
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standards. Imagine what we can do with content when all 
of us are finally on the same page. 
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Server Plus 8.0, and Microsoft Windows Media Services. 


february 2002 www.webtechniques.com 3 













































WGbtechniques 


Group Director/Publisher Bob Melk, 415-947-6425 

EDITORIAL 

Editorial Director Amit Asaravala, 415-947-6413, 

amit0webtechniques.com 

Managing Editor Margaret Berry, 415-947-6415, 

rnaggie0webtechniques.com 

Art Director Richard Koscher, 415-947-6418, 

richard0webtechniques.com 

Senior Editor, Technology Neil McAllister, 415-947-6717, 
neil®webtechn iques.com 

Associate Products Editor Mana Tominaga, 415-947-6428, 
mana®webtechniq ues.com 

Associate Managing Editor Allison Post, 415-947-6426, 

allison0webtechniques.com 

Print Designer Eva Lipson, 415-947-6404, 

elipson0cmp.com 

Webmaster H. H. Rusa Vuong, 415-947-6429, 
rusa0webtechniques.com 

Section Editor, Development Al Williams 
Contributing Editors Molly E. Holzschlag, 

Randal L. Schwartz, Lincoln D. Stein 
Editor at Large Michael Floyd 
Reprints Stella Valdez, 916-983-6971 

ADVERTISING 

Advertising Director James Long, 415-947-6421, 
jlong0cmp.com 

Strategic Accounts Director John Klima, 415-947-6447, 
jklima0cmp.com 

Eastern Sales Manager Chris Salem, 203-798-2215, 
csalem0cmp.com 

Western Sales Manager Michelle Stutsman, 415-947-6416, 
mstutsman0cmp.com 

Ad Production Coordinator Paul O’Hare, 415-947-6941 
Mailing Lists Rubin Response, 847-619-9800 

MARKETING 

Marketing Director Diana Stanich, 415-947-6411 
Marketing Manager John Loring, 415-947-6422 

CIRCULATION 

Group Circulation Manager Stephanie Blake 
Assistant Circulation Manager Robert Zermeno 
Corporate Newsstand Manager Pam Santoro 

INTERNET & MOBILE GROUP 

Vice President Manny Sawit 
Show Director Simon Tonner 

CMP MEDIA LLC 

President/CEO Gary Marshall 

Executive Vice President and CFO John Day 
President, Business Technology Group Adam K. Marder 
President, Specialized Technologies Group Regina Starr Ridley 
President, Technology Solutions Group Robert Faletra 
President, Electronics Group Steve Weitzner 
Senior Vice President, HR and Communications Leah Landro 
Senior Vice President, Global Sales and Marketing Bill Howard 
Senior Vice President, Business Development Vittoria Borazio 
Vice President, Manufacturing 8c Distribution Bill Amstutz 
Vice President and General Counsel Sandra Grayson 
Managing Director, CMP Worldwide Media U.S. 

Emily Ospenson-Crume 

Article Submissions: Please consult our editorial calendar at 
www.webtechniques.com/calendar, then send proposals to 
editors0webtechniques.com. 

Web Techniques on the Internet: Visit our Web site at 
www.webtechniques.com or send email to editors0webtechniques.com. 

Subscriptions: U.S.: Free to qualified recipients: all others $ 34-95 
for 1 year. Canada and Mexico: $ 44-95 per year. Other countries: 

$54.95 per year. Canada Post International Publications Mail Product 
(Canadian Distribution) Sales Agreement No. 0956147 International 
orders must be prepaid in U.S. funds. 

Back issues may be purchased for $9 per copy (includes shipping and 
handling). For issue availability call 800-444-4881 (U.S. and Canada). 
All other countries, call 785-841-1631. Back-issue orders must be 
prepaid-please send payment to Web Technique s. 1601 W. 23rd St.. 
Suite 200, Lawrence. KS 66046-0127. 

For subscription questions, change of address, and orders, call toll- 
free 800-677-2452 (U.S.). For all other countries call 847-647-5928 
or fax 847-647-5972. Or write to: Web Techniques. P.O. Box 1246. Skokie. 
IL 60076-8246. Please indicate Web Techniques on all correspondence. 

International newsstand distributor: Worldwide Media Service Inc., 

30 Montgomery St.. Jersey City. NJ 07302. 212-332-7100. 

Entire contents copyright © 2002 by CMP Media LLC. unless otherwise 
noted on specific articles. All rights reserved. 

, v Printed in the USA 

CMP WBPA 

▼ INTERNATIONAL 



industry experts at work 


Technology Writer, Web Developer 
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dates back to the 
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ect manager at Ziff 
Davis Comdex Forums 
in 1995, the lead 
producer of a site 
for game developers 
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Jennie has contributed to such publications 
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proprietress of Girlwonder Productions 
(www.girlwonder.com). 
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Producer of ForgeFX 
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was director of technology for the Internet 
Development Group in San Rafael, CA. His 
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gives him a multidisciplinary perspective 
on interactive development projects. You 
can email him at meyers0forgefx.com. 
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Freelancing from his home in Portland, OR, 

Jay writes for several 
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daily articles that 
he produces for 
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keep him in tune with 
breaking news and 
advancing technology. 
Jay’s journalism back¬ 
ground ranges from daily newspapers and 
newsweeklies to technology and business 
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migrated to the Web in 1998. From 1999 to 
2001 Biz served as creative director to the 
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splits his time between writing about the 
Web and working on sites. Biz believes that 
every Web surfer has the potential to be a 
builder if he or she is provided with the 
right environment. To find out more about 
Biz and his work, check out his Weblog at 
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HostPilot was designed to put web server controls at your fingertips. From the first moment you 
create a virtual server, you'll feel the difference of real, hands-on control. 


Here are just a few of the HostPilot features that have web developers flying high 


Set up a web server in 10 minutes or less 
Manage your data sources on the fly. 


windows l 

WEB SERVER^ 
or 

WINDOWS 2000" 

WEB SERVER 

Plans from $24.95/month 

With support for: 

Active Server Pages 

ColdFusion 5.0 
CFFILE, CFDIRECTORY, 
and CFC0NTENTtags 

Frontpage 2002 

SharePoint Team Services 

MS SQL Server 7 and 2000 

MS Access, FoxPro 

StoreFront and other 
shopping carts 

Verisign Payment Services 

Drumbeat 

WebTrends 

More.... 


Microsoft 

Certified 


Soluti 

on Provider 


Copyright lntermedia.NET. Inc. 2001. All Rights Reserved. 

Microsoft Exchange Server is a registered trademark of Microsoft 
Corporation. All other trademarks are property of their respective holders. 


- weaie uusium tags on tlie Tiy. 

- Set user permissions on the fly. 


Experience the Ultimate Control Panel, first hand. 

Take a test flight at www.intermedia.net 

^INTERMEDIA. NET 

1-800-379-7729 

FOR FREE SET UP USE PROMO CODE WEBTEC2001 


















































HOME PAGE 


Next month Web Techniques will have a new name and a new look. A good 
thing just got better. 


Enter the New Architect 



Regular readers will point out that Web Techniques 

hasn’t been solely about Web techniques for several 
years now. As the number of Internet technologies and 
products has grown since our first issue in early 1996, 
the magazine has expanded to cover topics like applica¬ 
tion servers, P2P networks, wireless content delivery, 
and so on. The articles in this issue are a good example 
of that. 

So while the Web Techniques brand has been embraced 
by a loyal group of readers, it doesn’t accurately explain 
our coverage anymore. Outside observers often question 
whether we are strictly a magazine about HTML coding 
and site design. Of course we’re not. Because of this 
concern, we began an extensive research campaign to 
determine whether it was time to make some changes. 
Over the past year, we conducted quantitative surveys 
with readers. We brought in subscribers and non¬ 
subscribers for focus groups. We held an editorial round 
table and gathered reader profiles. We asked our writers 
for feedback, and met with key vendors to learn what 
they were working on. We also looked at independent 
research from IDC and Gartner. Those of you who read 
my monthly WebTechniques.com newsletter know 
that, in the end, we chose to rename the magazine 
New Architect. 

I won’t try to make you believe that New Architect refers 
to a grand concept that will revolutionize the way you think 
about your job. Instead, simply put, the New Architect name 
refers to the group of people we want to reach every month. 
If you look strictly at titles, a new architect could be an 
information architect or a network architect, or no archi¬ 
tect at all—the titles of lead applications developer and IT 
manager work just as well. Likewise, a new architect could 
be a Webmaster who sits on a company-wide steering 
committee, or a CTO who isn’t afraid of writing code when 
the project calls for it. The point is, New Architect isn’t 
about a specific job title. It’s about people who understand 
the value of the Internet and who bring together creativity 
and technology. 

A couple of people have asked me if the title might 
confuse readers, or if traditional architects might think 
this magazine is for them. I admit that we’re taking on an 
element of risk here, but let’s give the readership and the 
traditional architects the credit they deserve. Whether you 
receive the magazine in the mail or see it on the news¬ 
stand, it will be quite clear from the design, logo, and 
content that New Architect is a publication for technologists. 
The rest is up to our great marketing team and to the 
acceptance of this term as a description of where 
the Internet industry is heading. 


In addition to evolving our name and design, we’re 
making some changes to the content. When you get the 
first issue of New Architect next month, you’ll notice that 
we’ve slightly modified the four-section concept. The 
Design section will become the Interface section. Strategy, 
Development, and Infrastructure will still be there. But now, 
instead of dividing each issue into four groups of articles, 
we’ve narrowed the focus to one article in each of these 
sections. Essentially, we’ll provide four different angles on 
oie central topic. For example, March’s theme is digital 
rights management (DRM), so you can expect to find an 
exploration of DRM from the Interface perspective, from 
the Development perspective, and so on. Our goal is to 
help you see the full picture. 

In addition, rather than provide step-by-step tutorials, 
we’ll offer more evaluative pieces that examine why a 
particular protocol, practice, or product is worth your 
time. To accomplish this, we’re introducing a new section 
called Critical Decisions that will help you answer timely 
questions, like, “When do I need to start thinking about 
Web services?” And, “Does C# solve the problems that 
Java couldn’t?” 

Big changes always mean tough decisions. Molly E. 
Holzschlag, Randal L. Schwartz, Eugene Eric Kim, and Jim 
Jagielski are all writing their last columns this month. 

It’s not that topics like Perl and Apache aren’t important, 
because we certainly know that they are. All of our colum¬ 
nists have helped build this magazine’s reputation and we 
will continue to publish their work from time to time. But 
to more thoroughly cover the growing list of important 
languages, tools, and methodologies, we needed to make 
room for new writers and different perspectives. 

Take a good look at New Architect when it arrives next 
month. Give it a chance, and then, if you decide the maga¬ 
zine is no longer for you, we won’t hold it against you. If you 
decide to keep reading, though, we promise we won’t let 
you down. We haven’t changed our mission since day one. 
We will continue to educate and inspire you with the most 
objective, in-depth information about Internet technolo¬ 
gies. Only now, we’ll do it even better. >< 



L 


Editor in Chief 
Amit Asaravala 
amit®webtechniques.com 
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the Evolution continues odd 

Evolving from Web Techniques magazine, New Architect is the longest-standing monthly publication 
devoted to technology leaders who drive the adoption of Internet and emerging technologies for their 
organizations. New Architect educates and inspires these innovators with an in-depth and objective 
analysis of the critical technologies that will enable their organizations to achieve their business strategies. 



Web Techniques is launched from Dr. Dobbs in 1996 to serve a new, specialized market 
of Web developers. The demand for Web developers explodes, and with this demand, 
the need for developer education becomes essential. Web Techniques is uniquely 
positioned to provide the tools and education these developers require. 


Circulation: TOOK (qualified, 1998) 
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-2001 WBbtechniques Solutions for Internet Professionals 


Web Techniques undergoes a redesign in March 2000, adding a new logo and four 
expanded editorial sections: Strategy, Design, Infrastructure, and Development. 
Organizations begin to take e-business seriously, and create complex Web strategies 
and sites. Web Techniques evolves into a more solutions-focused publication outlining 
not only development and design techniques, but also the ways in which these 
techniques can strategically affect businesses. 


Circulation: 175k (qualified) 


2002 


neWodrchitect 


Internet Strategies for Technology Leaders 


Got Security? Safeguarding the f.-to-p .< 



New Architect continues the evolution of Web Techniques, devoting each issue to exploring 
the potential benefits, and possible disadvantages, of current and emerging technologies. 
These elements are essential for creating an environment that technology’s new architects 
can turn to when it’s time to make crucial purchasing decisions. This is why Internet 
leaders have put their trust in the magazine’s editorial since 1996, and will continue to 
do so for years to come. 


























E-terrorism could be on the way. All of us should be fighting back by beefing up 
security. So why are we standing around looking helpless instead? 

WEBMASTER'S 
DOMAIN | 

Guarding Against Terror __ 


Lincoln 

Stein 



online 

resources 

Where you can find an 
ounce of prevention. 


In the months after September n, much has changed and 

nothing has changed. In my suburban neighborhood, the 
county sheriff’s department has been patrolling the reser¬ 
voir system daily. At work, there has been markedly more 
interest in office security systems, biometric devices, and 
smart cards. On the road, I’ve seen National Guardsmen in 
New York’s Penn Station, and have watched the guards at 
airport security checkpoints confiscate nail files and tweez¬ 
ers from outgoing passengers. And of course, there are flags 
and ribbons everywhere. 

But inwardly it feels like business as usual. The President 
exhorts the citizenry to resume normal economic activity, 
and aside from a general call to volunteer time in commu¬ 
nity service and be watchful, there’s nothing specific that 
the general citizen can do to help in the proclaimed war on 
terrorism. Increasingly, the flags and patriotic slogans have 
degenerated into marketing devices. The U.S. Congress is 
counting on patriotism to justify reforming wire-tap laws. 
Big business is encouraging consumption as a patriotic act. 
Even email spammers have gotten into the act, peddling 
anti-anthrax cures, security doors, and phony charities. Is 
there nothing we can do in the wake of September 11 to 
make the world a better and safer place? 

As it so happens, we, as information system profes¬ 
sionals, have a lot we can do. The lesson of September 11 
is that theoretical risks have a way of coming true. For 
years, individual experts and expert commissions have 
warned us about the lax security at American airports. 
Despite repeated demonstrations of the destructive 
power of bombings in Beirut, Kenya, Tanzania, and 
Yemen, lawmakers chose to ignore these warnings. For 
years, experts have warned about deficiencies in the 
national health care system’s ability to deal with bioter¬ 
rorism. Indeed, we’ve been treated to the spectacle of 
public health officials first misunderstanding the nature 
of the anthrax threat, and then offering contradictory 

scared straight 


The Risks Digest 

“Forum on Risks To The Public in Computers and Related 
Systems” 

catless.ncl.ac.uk/Risks 

The BugTraq Forum 

www.securityfocus.com 

DOE Computer Incident Advisory Capability 

www.ciac.org/ciac 

The Honeynet Project 

project.honeynet.org 


information and advice to the public. I shudder to imag¬ 
ine the consequences should our enemies choose to 
launch a full-blown bioterrorism attack. 

For decades, computer-security experts have been warn¬ 
ing us about the vulnerability of our electronic infrastruc¬ 
ture. They tell us that our systems are dangerously fragile, 
dangerously interdependent, and dangerously deficient in 
monitoring and disaster recovery planning. Over the past 
few years, computer crime rates have dramatically 
increased, ranging in severity from Web site defacements, 
to denial of service attacks, to credit card theft. As 
described by the members of the Honeynet Project (at 
project.honeynet.org) in their recent book Know Your Enemy, 
some of the crime is politically motivated, and much of it 
originates in off shore locations. We all have personal expe¬ 
rience with the disruption that computer viruses bring. It 
isn’t just in your imagination that the viruses are becoming 
more virulent, they are. 

A well-financed and sophisticated terrorist organization 
could launch a concerted attack against the world’s com- 
puter systems and clearly some business systems would 
succumb. The direct effects of such an attack would be 
dwarfed by the indirect ones. Clients, shareholders, and 
business partners would lose confidence in the integrity of 
the data coming from a compromised company’s informa¬ 
tion systems. 

The September 11 tragedy should serve as a wake-up call 
for computer security. E-terrorism should no longer be 
treated as a mildly interesting possibility, but as a threaten¬ 
ing, imminent probability. There’s no more room for busi¬ 
ness as usual in the IS world. We must act now to avoid 
seeing our networks and computer systems crumple. We 
should act both to protect our own systems and to protect 
those whose security would be compromised should our 
systems fail. 

What You Can Do 

The steps you should take to strengthen an information 
system are analogous to the steps you would take to 
secure an office building. First, limit access to the building. 
A building with a single front door through which all visi¬ 
tors must exit is easier to protect than a building with 
dozens of entrances. The electronic equivalent to a single 
front door is a high-quality firewall system that forces all 
incoming and outgoing network traffic to pass through a 
single entry point. 

The next step is to place a guard at the door. This guard 
obtains each visitor’s identification, verifies that the visitor 
has a legitimate reason for entering the building, and logs 
the visitor’s name and time of entry. Again, a good firewall 
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system provides the technical means to accom¬ 
plish this, but only if it’s part of a coherent 
security policy—one that presents written rules 
governing what traffic is allowed to pass 
through the firewall. For example, a security 
policy may let incoming email be delivered to 
the organization’s mail server, but not to any 
of the other machines on the network. 
Anything not explicitly allowed is implicitly 
disallowed. 

You should use a written security policy to 
configure and test the firewall. This is equiva¬ 
lent to giving the lobby security guard 
instructions on who is allowed to enter the 
building, and under what circumstances. It is 
far superior to subjective instructions like, 

“be on the lookout for suspicious activity.” 
More importantly, explicit instructions help 
you assess whether the firewall is performing 
its intended job. 

A secure building doesn’t rely entirely on 
the lobby guard. An unwelcome intruder may 
find other means of entering, such as tunnel¬ 
ing through the basement, or crawling 
through an unguarded window. In addition to 
posting guards at legitimate entrances, a 
secure building has intrusion detection sys¬ 
tems, such as burglar alarms and motion 
detectors. A well-secured computer network 
also has at least one, and preferably two 
types of intrusion detection systems (IDS). 
One type of IDS is designed to catch intru¬ 
sions in real time. Such systems are typically 
built around packet sniffer technology, and 
monitor the network for unusual activity that 
bears the signature of an attack in progress. 
The other type of IDS is designed to detect 
intrusions after they’ve occurred. These 
systems regularly check critical system 
resources, such as password and configura¬ 
tion files, for signs that they’ve suffered 
unauthorized modification. Neither type of 
IDS is foolproof; it pays to run both and pay 
attention to the warnings they generate. 

Once an employee or visitor is allowed into a 
secure building, he’s not allowed to wander 
around unattended. A visitor is typically made 
to wear a prominently displayed visitor’s pass, 
and is only allowed access to a particular 
portion of the building. Employees and other 
building staff carry identification passes that 
let them access portions of the building where 
they have a legitimate right to be. In the same 
way, computer system security doesn’t stop at 
the firewall. Every host, database, and network- 
attached storage system should require authen¬ 
tication from someone who is trying to access 
its resources. 


Any company that requires its employees 
to juggle dozens of different identity passes 
to move from office to office will quickly 
find the system unmanageable and error 
prone. The same goes for computer-based 
authentication systems. A patchwork system, 
one that asks users for different usernames 
and passwords as they move from place to 
place, is extremely difficult to manage. 

Worse, it’s guaranteed to accumulate unused 
accounts that invite exploitation by interlop¬ 
ers. Secure computer systems should use 
a single, consistently applied process for 
authenticating users and authorizing the 
resources they can access. Common single¬ 
sign-on systems include those based on 
Windows NT authentication, Kerberos, NIS, 
NIS+, and LDAP. 

With anthrax-laden letters arriving in the 
mail, it’s inevitable that the postal system, 
and probably government mail rooms 

; 

as well, will begin to routinely radiation-ster- 
ilize incoming mail. Computer viruses borne 
by email have become all too familiar in our 
daily lives-we must begin sterilizing our 
email as well. 

At a minimum, incoming email should be 
filtered for viruses at the point of entry, either 
at the firewall or the mail spooler. Several 
commercial anti-virus products provide this 
feature. Because virus-laden attachments 
can be sent in compressed or encrypted form, 
fooling the filter, each user’s computer should 
run its own virus checker. Needless to say, you 
should regularly update the antiviral software 
on the central server as well as on individual 
machines. 

What Developers Can Do 

Personally, I have little faith in virus checkers. 
It inevitably comes down to a race between 
the bad guys who concoct new virulent 
strains in their basements, and the antivirus 
vendors who must continually update their 
software to keep up with the emerging 
strains. Antiviral vendors are always half a 
lap behind. The presence of antiviral software 
did little to check the spread of the Love Bug, 
Chernobyl, or the various strains of Nimda. 

The root of the email virus problem is that 
attachments can contain executable or 
“active” content such as Microsoft Word 
macros and HTML JavaScript commands; and 
it’s too easy for hapless users to run unautho¬ 
rized software on their machines. The problem 
with active content is now so obvious that it’s 
negligent for software vendors to continue 
downplaying it. 


Untrusted software should never be allowed 
to execute on a user’s machine without being 
subject to a strict set of restrictions on 
resource usage. Untrusted software should be 
prevented from accessing the file system, the 
network, information about other processes, 
or even information about the runtime envi¬ 
ronment. Its ability to use CPU cycles and 
memory should be subject to firm resource- 
allocation limits. If users are allowed to grant 
increased privileges to a piece of software, 
they must do this explicitly, and only within 
the limitations set by their organization’s 
global policies. 

This is essentially the “sandbox” security 
model implemented by the Java virtual 
machine. It’s simple to understand and doesn’t 
require any special action on the part of 
application developers once they implement it. 
Although there were glitches in the early imple¬ 
mentations, the sandbox model has withstood 
the test of time. While exploits based on Word 
macros, VBScript, and JavaScript have run 
rampant, not a single system has been brought 
down by a malicious Java virus, trojan, or 
worm. 

Operating system developers should heed 
the sandbox model’s success and build mech¬ 
anisms into their systems for distinguishing 
trusted from untrusted code, executing 
untrusted code in a safe environment, and 
monitoring what untrusted code is trying to 
do as it’s executing. 

I’m disturbed to say that I don’t see a 
trend toward this security model. Rather, I 
see efforts like Microsoft’s .Net strategy 
further blurring the lines between trusted 
and untrusted code, creating a world in which 
code floats around the Internet embedded in 
XML documents. Such a world is in critical 
need of a crystalline, tamperproof security 
framework, but such advances don’t emerge 
from Microsoft’s white papers. Rather, I find 
a patchwork of fragile, technically complex 
half-solutions such as the Passport system. 
Inadequate security is worse than none at all. 

Let’s not wait for an e-terror attack to crip¬ 
ple our electronic infrastructure. Software 
developers, you owe it to the world to rethink 
your business strategies. Security shouldn’t 
be an afterthought, and well-informed 
consumers will pay for it. >< 

Lincoln is an M.D. and Ph.D. who designs infor¬ 
mation systems for the human genome project 
at Cold Spring Harbor Laboratory in New York. 
He can be reached at lstein(a)cshl.org. 
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The USA PATRIOT Act may not hold up under scrutiny, but who wants 
to challenge it? For now, the government has full access to your data. 
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LEGAL CODE 


Becoming a Patriot 


Bret A. 
Fausett 


I’ve always subscribed to the theory that if you really 

want to know what a new piece of legislation is all about, 
you need only look at what is known as the short title. Every 
piece of legislation has one. The National Energy Security 
Act of 2001? That’s a bill backed by the oil and gas indus¬ 
tries to open the Alaskan wilderness and parts of our 
national forests to new drilling and exploration. The Youth 
Smoking Reduction Act? That would be a piece of legisla¬ 
tion backed by the tobacco industry. Notice a trend here? 
Just take the most cynical meaning of the short title, and 
you’ll be a long way toward knowing what the new legisla¬ 
tion is about and who is behind it. 

So on October 26, 2001, when President Bush signed into 
law the USA PATRIOT Act in response to the terrible events 
of September 11 ,1 was immediately suspicious. If my theory 
held, the USA PATRIOT Act would be some heavy-handed 
Soviet-style law, with nothing very patriotic about it. And 
that’s just applying my theory to the acronym. The entire 
short title is the Uniting and Strengthening America by 
Providing Appropriate Tools Required to Intercept and 
Obstruct Terrorism Act of 2001. Gulp. 

The act amends several existing laws in an effort to 
increase law enforcement surveillance powers, tighten Visa 
and immigration procedures, and stem the flow of money to 
terrorist organizations. The initial press on the USA PATRIOT 
Act suggested my theory had held. Variously described as a 
wholesale relinquishment of our civil rights or a necessary 
(albeit intrusive) measure to ensure personal safety, what 
wasn’t in question was that the new legislation pushed the 
outer boundary of the government’s authority to monitor our 
personal communications. What’s more, it pushed against 
the line of constitutionality, and may have crossed it. 

In the past, whenever this kind of intrusive, possibly 
unconstitutional legislation was passed into law, a group 
like the American Civil Liberties Union (ACLU) or Electronic 
Frontier Foundation (EFF) had a lawsuit ready to file the 
moment it took effect. Not so with the USA PATRIOT Act. 
Despite serious questions about the constitutionality of the 
law, the usual suspects have sat on their legal challenges 
(at least as of the time this article went to press). 

Terrorist attacks change everything. 

One Act, Many Laws 

One thing missing in the press descriptions of the USA 
PATRIOT Act is that it isn’t a single new law. It was passed 
as one omnibus piece of legislation, but it amends dozens 
of existing laws. 

Copies of the Act are downloadable from the Web 
(www.politechbot.com/docs/usa.act.final.102401.html), but 
you won’t find the actual text of the legislation very useful. 


Most of it looks like this: 

“Section 1402(b) of the Victims of Crime Act of 1984 (42 
U.S.C. 10601(b)) is amended—(1) in paragraph (3), by striking 
‘and’ at the end; (2) in paragraph (4), by striking the period 
at the end and inserting and’; and (3) by adding at the end 
the following: ‘(5) any gifts, bequests, or donations to the 
Fund from private entities or individuals.” 

In other words, the text of the USA PATRIOT Act makes 
no sense whatsoever when read by itself. No matter how 
closely you read the 131 single-spaced pages of the Act, 
you’ll have very few hints at what the changes were 
aoout. Because the USA PATRIOT Act rewrites existing 
laws, in just the “delete this, add that” manner quoted 
aoove, you need to read it alongside your personal copy 
of the United States Code, all 50 titles, to have any real 
c ue about what’s going on. 

I’m really hoping that all of our elected representatives 
took the time and care to understand the countless 
changes they were making to our existing body of federal 
legislation. Because they pushed this wholesale rewrite 
through Congress in less than a month, though, I’m not 
ODtimistic. In fact, I think it’s going to take many 
months, if not years, before the ramifications of these 
changes are fully understood by anyone. Including the 
people who passed it. 

Because I do happen to be the lucky owner of a complete 
set of the United States Code, however, and have been 
through the text of the Act, here’s a high-level overview of 
what it all means, especially as applied to the Internet. 

Who is Called to Duty? 

For the time being, and possibly for a long time to come, 
the USA PATRIOT Act will apply to all of us in the United 
States. Its effects may even be extraterritorial. In some 
ways, everyone is called to duty. 

The burdens of the new legislation fall into a few basic 
categories. The first are the affirmative obligations to do, or 
refrain from doing, certain things. These are especially 
important to know about because you don’t want to fail to 
do something that you’re now required to do, or do some¬ 
thing that is now prohibited. Many of the new laws carry 
f nes, or worse, for failing to comply. Even if you aren’t sure 
what the new laws require, they still apply to you. And the 
government is watching. 

A second area of responsibility is especially important for 
network operators. The government has new powers to 
subpoena electronic records and monitor Internet commu¬ 
nications, and your assistance may be required. In fact, if 
you’re working for a major ISP or backbone operator, this is 
old news. You’ve already been visited and made a decision 
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Thinking about the 
future of your 
storage 
infrastructure? 


Think iSCSI and DataPeer. 


There is no question that the Internet has 
forever changed how business is conducted. 
The storage industry has struggled to find a 
way to utilize the Internet to enable efficient 
data storage via the Internet. Due to the 
enormous growth of corporate data, 
businesses are looking to Storage Service 
Providers to supply remote storage and 
backup solutions. The key to providing this 
service is found in iSCSI. 

The Power of iSCSI 

iSCSI protocol enables universal access to 
storage devices and storage-area-networks 
(SANs) over standard Ethernet-based TCP/IP 
networks. iSCSI opens the world of remote 
storage and backup services to its users. 
With iSCSI, users can enjoy the unlimited 
scalability, security, and performance of 
enterprise class SANs, without the hardware 
investment and on-going management 
headaches. Empowered with this ability, IT 
departments will no longer have to play the 
inefficient and costly game of catch-up with 
local direct-attached storage. 

Benefits of iSCSI 

iSCSI provides a number of advantages 
including: 

• Employment of existing, familiar 
network technology and 
administration 

• Reduction in training and staff costs 

• Utilization of proven transport 
infrastructure 

• Scalability over long distances 

• Brings Ethernet economics to 
storage minimizing TCO 

• No additional hardware investment 
required for implementation 


Utilizing iSCSI 

DataPeer has built iSCSI technology into its 
entire product offering to enable users to 
store and back-up their data onto DataPeer's 
SAN. Those offerings include: 

• Remote Primary Storage - 

DataPeer's Remote Storage service, 
using iSCSI, is like installing a SAN 
right on your own PC! iSCSI 
technology enables your remote 
storage space to appear as a local 
drive right on your network. 
DataPeer's Remote Storage service 
gives you the benefits of an 
enterprise-class infrastructure, 
unlimited scalability, complete 
security, 24/7 support and the 
highest availability rates possible. 

• Remote Tape Backup - In today's 
environment backing up data is no 
longer a luxury, it's a necessity. 
DataPeer's Remote Tape Backup 
solution gives clients the ability to 
perform regularly scheduled tape 
backups of data, remotely. The 
entire backup process is performed 
within the DataPeer Datacenter to 
provide the utmost in quality and 
security. 

• Remote Disk Backup - For clients 
who do not require tape backups, 
DataPeer offers remote disk backup 
on the DataPeer SAN. This solution 
allows users to perform regularly 
scheduled backups to the DataPeer 
SAN. In the event of any 
catastrophe, their data is now safely 
stored in a remote location and is 
accessible from anywhere at any 
time. 


• Remote Replication - DataPeer 
Remote Replication provides you 
with a real time copy of your data on 
the DataPeer SAN. In the event of a 
local storage subsystem failure, this 
synchronous replication solution 
provides immediate access to the 
remote data, eliminating costly 
downtime and data loss. 


iSCSI provides a cost effective, efficient 
solution to securely store and manage 
data at a remote location. Utilizing the 
power of the Internet to facilitate data 
transmission empowers virtually 
everyone to reap the benefits and 
security of remote storage. To learn 
more about DataPeer's iSCSI- 
based solutions and how you can 
experience iSCSI technology for 
yourself visit www.DataPeer.com 
or calll-866-432-8273. 


DataPeer* 

Any Format. Any Location. Any Time. 









BECOMING A PATRIOT 



about whether and how to cooperate with 
government investigators. But as investiga¬ 
tions move from high traffic areas to more 
specific places on the network, even small ISPs, 
bulletin board operators, list administrators, 
and IT managers may start receiving calls 
from government officials. You’ll want to 
think about what you’ll do and know what 
the law requires before you get a call. 

The last area in which these activities have 
some effect is on individuals and Internet users. 
Okay, so you’re not a terrorist. It’s not that you 
have to worry (much) about being hauled off to 
jail, but you should be aware that your Internet 
communications might be monitored, or your 
ISP or host might feel it has affirmative obliga¬ 
tions to report your activities to the govern¬ 
ment. The new USA PATRIOT Act gives all of us 
a diminished expectation of privacy. 

If you’re looking for a quick index of what’s 
required under the new law, you won’t find 
it here. The EFF recently released a summary, 
but one of the real burdens of the new law is 
that you, and your lawyer, have to make sense 
of it on your own. And quickly. 

In early September 2001, no one was even 
thinking about the need for new legislation. 

By the end of that month, nearly every federal 
law on the books had been examined by the 
U.S. Department of Justice to see how it could 
be revised to assist in law enforcement’s war 
on terrorism. Just a few weeks later, those 
changes had been approved by Congress and 
signed into law by President Bush. So while I 
don’t have room to provide a laundry list of 
the many changes you need to know, here are a 
few general guidelines to think about. 

It's About Money... 

A chief aim of the new law is to cut off the 
supply of money to terrorist organizations. 

So if you’re responsible for receiving 
payments from customers or processing 
other kinds of financial transactions, there 
are several provisions that you’ll need to 
examine more closely. Title III of the Act 
focuses on stopping money laundering and 
prohibits the financing of terrorists. 

Identification is a theme that runs through 
many of the new changes relating to financial 
transactions. When someone signed up for an 
online bank account last year, you only needed 
to know that he or she actually had money. 

Now, the Treasury Department is advancing new 
regulations that will specify what information 
about someone’s identity you’ll need to verify. 

Cheerfully accepting a new customer named 
John Doe isn’t acceptable anymore. You’ll need 


to take reasonable steps to verify the identity 
of your customers, and you’ll have to file the 
verification documents. In addition, you have 
to check the names of your customers, both 
individuals and organizational names, against 
a list of known and suspected terrorist organi¬ 
zations. If there’s a match, you have a duty to 
report the person or organization to law 
enforcement. 

The new laws also focus on cash arid wire 
transfers. For example, whenever you handle 
cash in excess of $10,000 in any single trans¬ 
action, you have to report the transaction to 
government officials. Not a big deal for most 
businesses, but if you run a casino, you’ve 
just been saddled with an administrative 
nightmare. For most Internet-related businesses, 
which don’t handle cash at all, requirements 
to maintain records of wire transfers and 
other electronic transactions pose similar 
burdens. One provision of the new law even 
requires companies to report “suspic ous 
transactions” to law enforcement. 

Right now, no precedent exists for how these 
laws will be applied in the real world, and who 
knows what counts as “suspicious,” but the 
easiest rule of thumb is to (a) know who you’re 
doing business with, and (b) maintain records 
of all your business dealings. Probably not bad 
business advice, even if you aren’t trying to 
identify terrorist organizations. 

...and Information 

In addition to placing new obligations on 
financial reporting, the Act also endows law 
enforcement with new surveillance powers. 
Many of the revisions were designed to bring 
the Internet, voicemail recordings, wireless 
voice and messaging services, and other new 
forms of electronic communications within the 
scope of existing search and seizure laws. Every 
kind of informational medium other than your 
brain is now subject to government search and 
seizure. For information companies, this means 
your live systems, your back-ups, and your 
archives. It means that information traveling 
through your routers and servers is subject to 
monitoring without your knowledge. 

One thing that’s really new and different is 
the delayed notice provision for certain kinds of 
search warrants. Under the Act, the government 
is allowed to collect information first, then give 
notice of what it has done later. Typically, when 
a search warrant is issued, the person whose 
property is about to be searched is given notice. 
Not so under the new act. In circumstances 
when the government is afraid that a search 
warrant will tip a suspect off to the surveillance 


and give him or her a chance to flee, the govern¬ 
ment can search first, and inform later. 

...and Personnel 

One other burden on Internet companies is 
likely to come as a result of revised immigra¬ 
tion and visa procedures. 

Throughout the dot-com boom, Internet 
companies lobbied Congress fiercely for 
increased access to foreign technical workers, 
including an increase in the number of work 
visas that would be permitted. While the 
demand for talent has decreased over the last 
year, the process of getting foreign workers into 
the United States on visas will probably become 
more complicated and more time-consuming. 

Even routine business trips into this country 
by business partners and customers are likely 
to be more difficult. Anecdotal evidence 
abounds that visitors to our country are often 
greeted by long lines, invasive searches, and, 
with increasing frequency, lengthy investiga¬ 
tive detentions. Some companies have decided 
to make visits overseas, rather than have 
important business contacts subjected to the 
heightened security and immigration practices 
that will greet them here. 

What is Patriotism? 

Many of the government’s broad new powers 
are most certainly unconstitutional invasions 
of our personal privacy and rights, and to due 
process under the law. And while everyone 
seems to know that’s the case, no one is doing 
anything about it...for the time being. That’s 
rather amazing. 

As someone who considers himself a civil 
libertarian, I never thought I’d regard the fail¬ 
ure to exercise constitutional rights and limit 
government’s control over our lives as an act of 
patriotism. I’ve often viewed those who cham¬ 
pioned constitutional rights, even in defense of 
unpopular causes, as the biggest patriots of all. 
Nevertheless, I find something noble in the 
fact that everyone (even civil liberties organiza¬ 
tions) is willing to make immediate sacrifices 
for the sake of protecting others and ensuring 
that those who committed terrorists acts 
against our country are brought to justice. 

This will not always be true—and there will 
come a time when a legal fight to restore our 
civil liberties will again be a patriotic act—but for 
the present, compliance with these new laws is 
not only required, it’s downright patriotic. >< 

Bret is an intellectual property and Internet 
attorney, and a partner with Hancock, Rothert & 
Bunshoft. You can reach him at bret(a)lextext.com. 
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Take both conferences 
home with you on CD-Rom 


ON SALE NOW 

ONLY $99! 


You can purchase the official WEB2001 and 
Internet+Mobile Proceedings CD-Rom for only $99*. 
This information-packed disk features all the 
handouts and presentations the faculty of 
luminaries used during the conference classes 
that were held on Thursday, September 6 through 
Saturday September 8. (Intensives are not 
included on the CD.) 




This is your chance to get the same valuable 
information the attendees received at the 
conferences—that's over 1,000 pages 
of materia! from over 100 classes 

in the Strategy, User Experience and 
Technology tracks. Plus, you'll also 
have full access to the password- 
protected Vault, the WEB2001 and 
Internet+Mobile online library. 

Order yours today! 


Price does not include $3.50 shipping 
(via USPS) and handling per CD. 
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Profit from Mobile 
Data Services 

Get the new “Profiting from Option-Rich Networks” report 
from M-Business Research 


T he number one lesson learned from the Internet 
technology boom is that before you can implement 
new technologies, you need a plan to profit from 
them first. With the 


promise of mobile 
technology on the horizon, 
the same rules apply. 

A new breed of intelligent 
wireless network elements 
is emerging to let you 
charge flexibly for mobile 
service and content, 
supporting some 17 
charging options and 
innumerable new business 
models. 

Is your company positioned 
to profit from these 
networks? 

The new “Profiting from 
Option-Rich Networks” 

report from M-Business 
Research outlines 
everything you need to 


No other report provides such a thorough analysis of 
how to profit from this important new ecosystem. 
Here’s what “Profiting from Option-Ric h Networks” gives you: 


know to capitalize on option-rich networks to achieve 
bottom-line results. 

“Profiting from Option-Rich Networks” drills deeply 

into this vital new area 


Detailed analysis of which of 
1 7 new payment paradigms are 
likely to take off 


An overview of the new value 
chain the option-rich charging pP 
market will create 


- Insight into how to position 
your company in the value chain 
to remain integral to mobile 
commerce and secure the 
highest possible revenues 
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Details of the kinds of 
partnerships and deals likely to 
prove most profitable 
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An original survey revealing 
how other business strategists 
plan to exploit this opportunity 
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An index and cross-analysis 
of a new community of vendors 
that’s now surfacing to enable 
new payment models 


di"** 
w*— _ 



Insider perspective from key 
players shaping this emerging 
market 



Details on how carriers are 
making charging deals, what 
choices they face, and what 
opportunities are opening as a 
result 


of opportunity. This 
exclusive report 
provides in-depth 
insight into market 
timing, revenue 
potential, viable 
business approaches, 
key driving 
technologies, and 
potential entry points 
and returns. It also 
evaluates the charging 
models, supporting 
technologies, and 
driving enablers shaping 
this new charging 
landscape. It’s all the 
information you need to 
be among those reaping 
the benefits of option- 
rich networks. Q 


METHODOLOGY: This M-Business Research Report bases its analysis and projections on 105 qualified one-on-one interviews with wireless carriers, content 
and service providers, enterprise strategists, technologists, and vendor organizations. M-Business Research reports are also molded by original survey data conducted 
by M-Business, comprehensive reviews of existing projections pertinent to the market being investigated, and extensive input from the M-Business editorial board. 


For details, including a Table of Contents and ordering information, visit 

www.mbusinessresearch.com 

or call 1-800-444-4881 

(reference Report No.MBI 1101) 

Be among the select industry leaders to profit from 
option-rich networks. Place your order today! 
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Streaming Media? 


Against the backdrop of streaming horror stories—unnecessary and 

cumbersome Flash intros, MIDI files tinkling Mozart—are sites that 
make excellent use of streaming technology. These sites use a variety of 
methods to tell a story, enhance a brand, and develop an experience. But 
such sites aren’t all fun and games. There are strong business reasons to 
use streaming technologies as well. 

Streaming media can help you to construct a compelling experi¬ 
ence, and there are three main reasons to incorporate it into your site: 
to enhance the user experience and highlight your brand, to create a 
narrative, or to provide immediate content and information. But first 
you must decide whether streaming media is appropriate for your 
audience. 

Consider Site Objectives 

When you’re thinking of incorporating streaming and other broadband 
media into your online experience, think about the benefit they 
provide. Streaming media can add interactivity to information-sharing 
sites, create immersive narratives, and provide immediate information 
in a way that flat HTML sites cannot. However, it’s vital to consider who 
your users are-and whether they’re even able to benefit from an 
experience that uses plug-ins or requires a lot of bandwidth. 

Are your users ready for a narrative, all-encompassing experience, or 


do they just want to find an address? Are they likely to have the capa¬ 
bility to view a broadband site at all, or will their processors and 
connections wilt under the demand? 

If you’re creating a barebones information site, using streaming 
media or creating a broadband experience may hinderyour users’ ability 
to find what they need. To provide a compelling, cohesive experience, 
your users’ basic information needs must be considered first. 

“Our best clients are the ones that already have the information 
systems taken care of,” says Josh Ulm, creative director of ioResearch 
Studios, which specializes in streaming media. “They have the generic, 
plain-vanilla Web site out of the way and now they can start to do 
things that are beyond that—they don’t need to worry about whether 
people are going to get that bare, essential information. That’s 
where we can step in and say, ‘Let’s start to really communicate with 
your audience.’” 

Enhance User Experience and Highlight Your 
Brand 

Once you’ve decided to incorporate streaming media, there are several 
ways to make the transition easy for your users. 

Emeril Lagasse is a Food Network personality and chef, host of 
“Emeril Live!” He’s zany, brash, funny, and he can cook. The Emerils.com 
site offers a database of 3400 recipes, which is the primary 
reason that people visit the site. 

The original version of the Emerils.com site was built 
entirely in flat HTML. Every time one navigational element 
needed updating, it had to be updated on each and every 
flat page across the site-on hundreds of pages. 

New Emit, an Internet design collective, was contracted to 
incorporate Flash into the Emerils.com navigation, with an 
eye toward increasing the site’s usability and decreasing 
production time. At the same time, designers had to avoid 
alienating or confusing the site’s existing users when they 
included Flash (especially users who didn’t have the plug-in). 

“When someone wants to find information quickly, you can 
use Flash. But you shouldn’t make the user have to try to 
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DOES YOUR SITE NEED STREAMING MEDIA? 


“Our best clients are the ones 

that already have the information systems 
taken care of,” says Josh Ulm. “They have 
the generic, plain-vanilla Web site out of 
the way and now they can start to do things 

mm w 

ft 

that are beyond that. 


learn,” New Emit chief technologist Frank Conway says. “When they’re 
going to the site for entertainment purposes, you can make them jump 
through hoops. But if they’re coming to your site because they want to get 
content, you shouldn’t make them learn the Internet again.” 

New Emit’s CEO and creative director, Brett Calzada, agrees. “It’s good 
to build rich content, but it’s critical that the content be accessible to a 
vast majority of your audience.” 

New Emit developers used Flash to simplify the site for users. “We 
took the site from a two-dick navigation to a one or even zero click 
navigation,” Conway explains. This simple Flash component reads vari¬ 
ables, updates itself, and makes life easier for the production staff. It’s 
also small, about 28Kb. 

For instance, if you want to learn about Emeril’s New Orleans 
Restaurant, you roll over restaurants, move slightly to the right, and 
roll over Emeril’s New Orleans. Without clicking or having your page 
covered, you can obtain quick information about the restaurant’s loca¬ 
tion and phone number. By clicking, you visit a page that goes into 
greater detail about the restaurant. 

To prepare visitors for the new navigation, New Emit created small 
Flash movies of an animated Emeril that would appear over the weeks 
leading up to relaunch. A user without the Flash plug-in would see a 
message saying that the site could be enhanced with the Flash player. 

By the time the new navigation launched, users were accustomed to 
Flash. “It was a painless transition,” Conway says. 

Incorporating the Flash navigation gave Emerils.com an additional 
opportunity to brand the site, and bring in the specific character of 
Emeril Lagasse, says Brett Calzada. “We wanted to work some narrative 
into the site, to fulfill the Emeril identity-that crazy, zany cook-and 
start taking it to the next level.” 

The animated Emeril character participates in the site. “You feel like 
Emeril’s there all the time-he’s over there looking in, blending in with 
the overall idea,” Calzada says. Over time, this use of Emeril, as well as 
snippets of the television show “Emeril Live!” will blend into the naviga¬ 
tion. The miniature television screens in the navigation will showcase 
parts of the show. 

Emerils.com remains largely an information-driven site, where most 
people go to find relevant recipes quickly. New Emit was able to incorpo¬ 
rate Flash into the site and enhance the user experience, as well as 
substantially cut development costs and time (85 percent in monthly 
maintenance costs, and 93 percent in creating a new content section, 
with a total of a 60 percent reduction in monthly maintenance hours). 

As for gratuitous Flash, the New Emit team is thumbs-down. “If your 
site has to have a link on it that says, ‘Skip Intro,’ you’ve done something 
wrong,” says Conway. “Those Flash intros are completely pointless.” 

Rather than providing a splash screen for users, find ways to extend 
that experience. Conway suggests incorporating those splashy messages 


into the site. “Don’t bombard the user in the first 
five seconds, when the user isn’t entirely sure 
they want to be on the site in the first place.” 

Create a Broader Narrative 

Designers and developers at ioResearch Studios 
specialize in incorporating streaming media. The 
team has recently tackled the health-information 
technology site for Cerner Corporation. 

“Our studio specifically uses narrative and 
storytelling as a tool for our work,” says Ulm. 
“Basically, we find that people respond to a 
narrative in a way that raw information and the Web to date haven’t 
really been able to deliver. It allows us to create experiences that people 
can personally relate to, that they can envision themselves in.” 

Tom Stack, Multimedia Producer at the Cerner Corporation (a health 
information technology company that sells high-end medical software 
suites to hospitals), found that ioResearch Studios and Cerner had simi¬ 
lar ideas about storytelling and narrative. 

“In health-care-information technology, we’re all software develop¬ 
ers,” explains Stack. “It’s not difficult for Cerner to sell with product 
spec sheets, but that’s the way everybody else sells products. What we 
realize is that most decisions are made on some level as an emotional 
response. What we want to do is provide some kind of emotional venue 
for people so that they can attach to what we’re talking about, they can 
empathize with it.” 

Ulm and Stack met after Stack saw an ioResearch Studios piece called 
“Dreams,” in which the user chooses a variety of clips to put together a 
dream. These clips are then played in a movie for the viewer, on a full 
screen, with enveloping, womb-like noise pouring over the background. 

The idea was similar to an idea Cerner had—which later became the 
Cerner Virtual Theater. The Cerner Virtual Theater lets users choose char¬ 
acters and scenarios and create a custom Flash movie. 

“We picked some scenarios that tell the story of a patient, so you can 
identify with them,” says Stack. “By following that consumer or that clini¬ 
cian through the process, you can see what it’s like to be in their shoes.” 

It isn’t just storytelling and narrative that make for rich experiences 
like those created by Cerner Corporation and ioResearch—otherwise, 
users would just be watching movies. It’s the addition of a layer of 
interactivity that gives visitors the opportunity to engage. 

“When we add a layer of interactivity, it gives us a new facet to work 
with because we can change our narrative to more aptly suit people,” 
Ulm explains. “When people want a story, they try to relate themselves 
to it, and if they can relate themselves to it, they’ll open up to the ideas 
expressed in that story.” 

The interactivity of the Cerner Virtual Theater lets users shift the 
story to meet their own needs, making it more relevant to their personal 
situation. Ulm says interactivity helps ioResearch Studios relate their 
stories more directly to the individual. Interactivity forms a basis for a 
textured experience, especially with streaming media incorporated. 

“We can tell much richer stories by using broadband technologies, 
streaming technologies, Flash, audio, video-those kinds of things,” 

Ulm says. 

ioResearch Studios also built a powerful back end that lets Cerner track 
the scenarios and movies that visitors create. In addition, it monitors how 
far users get t Trough their movies—do they watch the whole thing, or 
jump ship? This ability provides insight into product interest, as well as to 
the usefulness of different movie segments. Cerner plans to build on this 
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platform over time, adding to the successful movies, creating new scen¬ 
arios for users and products, and analyzing the system’s overall success. 

Cerner realizes that its Virtual Theater and other product demos will 
set it apart from similar companies. “The idea with our site is to 
become the premier health-information, technology Web site,” Stack 
says. “Most Web content for businesses is pretty dull. Our goal is to 
design programs that our users are going to have a fun experience 
with, they’re going to get the information out of it, they’re going to 
have an emotional response.” 

Provide Immediacy 

After the terrorist attacks on September 11, people without radios and 
televisions in their offices turned to the Internet, tuning into audio 
and video streams of information as events happened. Streaming 
audio offers the same immediacy as radio or television, and it doesn’t 
require extensive bandwidth or processing power (although high 
bandwidth improves the experience). 

In the aftermath of the attacks, people quickly created their own 
responses to events and broadcast them on Live365.com. “People are 
making a statement through audio, which I think is really powerful,” 
says J. Betty Ray, senior editor of Live365.com. “They have put up a 
number of tribute streams-streams that are spoken interviews on 
the street, or kids talking to each other about the events of nine- 
eleven,” says Ray. “There was everything from an old retired vet from 
World War li who talked about old propaganda films from back in the 
day, to new, despondent, darksider types playing Nine Inch Nails’s 
‘Head Like a Hole’ over and over. People really communicated about 


the event through their streams. It’s still going on, they’re still updat¬ 
ing them.” 

If anything, Ray believes that audio on the Internet is underutilized. 
“Help documentation w th audio would be more useful than reading it, 
in some ways.” It could be incorporated into Flash as an event, for 
instance. “I think audio is one of the things the medium does best—it’s 
so immediate, so visceral, it hits people on a really deep emotional level.” 

Resonate 

Your goal is to create an experience that deeply resonates with your users. 
Spend time with them; watch them interact. See how they solve their day- 
to-day business problems. Understand what ails them, what pains them. 

And then look at the ways you can enhance their world. Don’t lose 
them in the process, and don’t try to be so clever with your streaming 
additions that you create an obtuse experience. Test streaming media 
with your users and give them ways to interact with it. And don’t be 
afraid to try this outside of the fun, entertainment realm. There are 
compelling reasons to incorporate streaming media even in places you 
wouldn’t usually consider, as Cerner has done. 

At the end of the day, it’s about getting your users and visitors to 
identify with your site as strongly as possible-whether through audio, 
Flash, video, words, or some suitable combination. >< 

Molly Wright Steenson is a strategist, interaction designer, and writer. 

She has developed over 50 sites for such companies as Wrigley, Netscape, 
Reuters, and Scient. She lives in Chicago and is the proprietress of 
Girlwonder Productions (www.girlwonder.com). 
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Ogg Vorbis 

The Xiphophorous Company 
www.xiph.org 

Free 

Patent-Clear and Headache- 
Free Sound Format 

The late ’90s brouhaha over digital music on 

the Internet brought the MP3 format into the 
popular consciousness. While most of the con¬ 
troversy centered on sharing copyrighted 
content over the Internet, less recognized was 
the fact that the MP3 format, actually a part 
of the MPEG-i multimedia standard, is propri¬ 
etary technology protected by an array of 
patents. However, unlicensed use of the MP3 
format by individuals for non-commercial use 
was tolerated, and compatible software was 
generally available free of charge. 

As MP3 file encoding and trading exploded, 
the Fraunhofer Institute-which developed the 
MP3 format-and its partner Thomson 
Multimedia stepped up enforcement of licens¬ 
ing fees for software or hardware that could 
create or play MP3S. Musicians, game developers, 
and streaming broadcasters who wished to 
use the format also had to pay. These some¬ 
times exorbitant licensing terms have resulted 
in the disappearance of several free MP3 
encoding applications, and in questionable 
legal status for others. 

Open Source in Action 

Ogg Vorbis is a relative newcomer to the field 
of compressed digital audio. The brainchild of 
Chris Montgomery, the Ogg Vorbis specifica¬ 
tion (which, alas, has yet to be completely 
documented) is in the public domain. Ogg 
Vorbis development is now sponsored by 
Montgomery’s Xiphophorous Company, a 
non-profit group that also develops the Icecast 
streaming server and the CDParanoia audio 
extraction program. 

Unlike any of its competitors-induding 
Windows Media Audio, RealAudio, MPEGplus, 
MP3, and MP3 Pro-Ogg Vorbis is free to use 
in every respect. The reference implementation, 
available on Windows and Linux, is approaching 
version 1.0 status (1.0 Release Candidate 2 is 
the current version as of press time, and 
i.orc3 may be out by the time you read this). 
Decoding is already stable, and audio files 
encoded by i.orci are guaranteed to be forward- 
compatible with future Ogg Vorbis decoder 


releases. Simple utilities for creating and playing 
Ogg Vorbis files (identifiable by the .ogg file 
name extension) are released under the GNU 
General Public License (GPL). 

The core encoding and decoding libraries 
necessary for writing applications that support 
Ogg Vorbis are available under a Berkeley-style, 
open-source license. This is an unrestrictive 
license that lets the code be used freely, 
modified, redistributed, and integrated into 
any product without the communitarian 
obligations of GPL-licensed code. 

Thanks to the openness of the format and 
implementation code, an impressive array of 
third-party software has already emerged to 
support Ogg Vorbis. Plug-ins are available for 
or included with many popular media player 
applications, including WinAmp, Sonique, 
and RealPlayer. A plug-in for Microsoft 
Windows Media Player is in the works, too. 
Third party software with Ogg Vorbis support 
is already available for Windows, Macintosh, 


Linux/Unix, OS/2, BeOS, and Java. The range 
of platforms it supports and the freedom 
with which it lets you port to other platforms 
give Ogg Vorbis the same qualities that made 
the Internet great: It’s openly specified, freely 
usable, and cross-platform. The project’s 
emphasis on working code over formal speci¬ 
fication is reminiscent of the development 
style of the Internet Engineering Task Force, 
the group responsible for standards at the 
core of the Internet. 

Cracking the Ogg Shell 

Strictly speaking, Ogg is a transport frame¬ 
work for multimedia data, while Vorbis is a 
lossy audio codec. Additional codecs are in 
the works, though these are much less 
mature: Tarkin is a video codec, and Squish 
is a lossless audio codec. Those codecs 
aren’t quite ready, and the patent minefield 
surrounding video compression may ulti¬ 
mately thwart Tarkin. Ogg is roughly analo¬ 
gous to Apple’s QuickTime, which acts as a 


container for a variety of audio and video 
codecs. Like QuickTime, Ogg supports 
the combination of multiple streams com¬ 
pressed in different formats. This allows for 
the future possibility of multimedia Ogg files 
containing video and audio. 

The Vorbis audio codec is similar to MP3. 

It’s designed for the lossy compression 
(meaning that sound believed to be inaudible 
to humans is thrown away) of CD-quality 
audio (16 bits at 44.1 or 48kHz) into bitstreams 
a fraction the original audio data size. Like 
MP3, variable bitrates and stereo channel 
coupling are supported. While MP3 only 
supports two-channel stereo, Vorbis supports 
up to 255 channels, making it suitable for 
encoding 5.1-channel surround sound. 

Most intriguingly, the next Ogg Vorbis 
release, i.orc3, will support bitrate peeling. 
This lets you transform a file on the fly to a 
lower bitrate without re-encoding it. This 
feature is handy for copying Ogg files to 


storage-limited portable devices, and is 
extremely useful for streaming audio at 
multiple bitrates for different classes of serv¬ 
ice. Note, however, that i.orc3 will only add 
the capability of encoding files that will 
support peeling. The actual tools to peel files 
aren’t yet available. 

Supporters claim that Ogg Vorbis files 
boast better sound and lower bitrates than 
with MP3. While I tend to agree with this 
statement, opinions regarding sound quality 
are highly subjective. The quality of an MP3 
file varies widely depending on which 
encoder implementation you use. You have 
to decide for yourself how different formats 
stack up. 

Evaluating the alternatives calls for a blind 
test. Take an uncompressed audio file, such as 
a .WAV file extracted from an audio CD, and 
encode it into each of the formats to be evalu¬ 
ated. If possible, try several different bitrates 
for each format. Then have a friend load the 
files into your media player’s playlist in a 
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random order, press play, and hide the player 
from your view. Listen and try to detect differ¬ 
ences. Rank your preferences, and maybe try 
to guess which is which. Repeat the test with 
varying types of sound clips. 

Regardless of their differences, all formats 
in question meet a certain level of sound 
quality, one that’s more than adequate for 
listening through computer speakers or a car 
stereo. Within any particular format, higher 
bitrates will result in higher quality, albeit 
with diminishing returns and heftier file 
sizes. The battle for supremacy will likely turn 
on factors other than mere quality, however. 
Royalty terms, availability of content, devel¬ 
oper support, and cost and availability of 
software will help determine which formats 
catch on. 

Market Segmentation 

The potential market for compressed digital 
audio is divided into several segments. There 
are personal users who copy and share copy¬ 
righted music for noncommercial use. This 
practice is legally protected by U.S. courts as 
fair use. Even members of Metallica admit to 
copying songs from LPs to cassette tapes 
in their premillionaire days. Indeed, the 
cassette tape was the original medium of 
choice for the personal-use market. MiniDisc 
is another popular format, particularly in 
Japan. But what has the recording industry up 
in arms is the ease of transmitting digital 
audio files over the Internet and the lack of 
generational loss when copying them. 

Personal users were the ones who latched on 
to MP3. MP3 was the first good quality format 
with a reasonable price, in addition to being 
free for noncommercial use. These users typically 
demand a level of audio quality that they feel is 
comparable to CD audio, and they encode audio 
at higher bitrates. Small size is desirable, but 
not crucial. Ogg Vorbis is initially targeting this 
market. Consumer electronics manufacturers 
and their chip suppliers will support the formats 
most used by these personal users. Right now, 
MP3 is that format, despite the royalties charged 
for building MP3 devices. 

Streaming content over the Internet is a 
different market altogether. Content distributors 
must be conscious of bandwidth and what 
software a client computer has installed. Here, 
RealAudio enjoys its first-mover advantage in 
the streaming arena, with a large client base 
and a constant focus on low bandwidth stream¬ 
ing applications. Fraunhofer and Thomson are 
flogging the new MP3Pro format. Engineered 
to provide MP3 quality at half the bitrate, 


MP3Pro is attempting to capitalize on the 
popularity of MP3. 

Windows Media Audio’s (WMA) prospects 
are bolstered by the support of 8oo-pound 
gorilla Microsoft. It’s the preferred format on 
Windows Media Player, which of course is 
bundled with the Windows operating systems. 
Microsoft is positioning WMA as a general 
solution for both streaming and personal 
music storage. Windows Media Player steers 
users into extracting CD audio to WMA by 
default, not MP3. Like Realjukebox, it handicaps 
MP3 by encoding only lower-bitrate MP3 files. 

WMA also has support for digital rights 
management, also known as copy protection, 
which makes it favorable for major record 
labels that want to sell songs over the 
Internet. Copy protection, in addition to being 
technically dubious, tends to infringe upon 
fair use rights. At the prices recording compa¬ 
nies are currently charging for digital music 
over the Internet, copy protection is a deal 
breaker. Consumers would rather keep buying 
audio CDs. Digital audio that you can only 
listen to a limited number of times, or that’s 
copy protected, might be acceptable to con¬ 
sumers if the songs were significantly cheaper 
(say with prices comparable to an actual juke¬ 
box). However, such a business model would 
be a leap of faith at best, and at worst, finan¬ 
cially destructive to an established recording 
company. 

Moving Forward 

Games, educational software, and other 
multimedia applications represent the best 
and most immediate opportunity for Ogg 
Vorbis to make an impact. In these vertical 
applications, audio is simply part of the infra¬ 
structure. The particulars of sound delivery 
are hidden from the end user, nullifying Ogg’s 
inherent disadvantages as a newcomer. The 
popularity of MP3 is irrelevant. Who has which 
player installed by default doesn’t matter 
either. Copy protection schemes are less of an 
issue because the audio contained in these 
titles represents only a portion of the overall 
product value. 

What does matter is the low cost, fixed and 
recurring, of using Ogg Vorbis instead of a 
proprietary audio format. Game vendors, as 
rational economic actors, have a strong incentive 
to maximize profits by minimizing the amount 
of tribute paid to patent owners. In this market, 
Ogg Vorbis is a no-brainer. It has no fees of 
any kind, and support can be built directly 
into the game or bundled in the form of 
runtime libraries. 



Ogg Vorbis can possibly make inroads into 
MP3’s personal-use market, but a home run 
isn’t guaranteed. Ogg Vorbis software can 
comfortably coexist with MP3 software. 
Software for extracting CD audio to MP3 can 
easily be retooled to extract to Ogg Vorbis 
instead. Unlike the VHS versus Beta war, a 
vendor doesn’t have to make an either/or 
choice. Similarly, digital audio players can 
support multiple formats simultaneously. 
Some MP3 player purveyors will preemptively 
add Ogg Vorbis support because it’s a cheap, 
software-based way to increase the versatility 
and appeal of their products. Other device 
makers who rely on dedicated ASICs for 
processing MP3 data, rather than on general- 
purpose processors, will require different 
or modified chips to support Ogg Vorbis. 

Such vendors will be more cautious about 
adding support. 

No one is served well by ripping their 
CD collection all over again or converting 
their MP3 files to Ogg Vorbis, so expect MP3 
to last a long time. Electronics manufactur¬ 
ers, unlike game developers, won’t be able 
to toss aside the yoke of MP3 royalties until 
the patents expire. Parallels may be drawn 
from the case of PNG versus GIF graphics 
formats. The latter, encumbered by patents 
and license fees for authoring software, is 
gradually being supplanted by the former, 
but the two will coexist for the foreseeable 
future. Or is it more like JPEG versus GIF? 
Cassette versus 8-track? Paper versus plastic? 

Even if Ogg Vorbis doesn’t dominate the 
Internet or deliver the great masses of musi¬ 
cians from poverty, look for it to become a 
major player in emerging and specialized 
applications. Its freedom will give both indi¬ 
viduals and businesses leverage, keeping 
owners of competing formats honest and 
reducing the amount of money that can be 
extracted from the digital-audio market. 
Because Ogg Vorbis is an open and freely 
adoptable standard, it‘s likely to spread. 

-Charlie Cho 


Charlie is an independent consultant living in 
San Jose, CA. Email him at charlie(a)cheaux.com. 
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Knowing the rules gives you freedom to break them and the skills to 
make your content more powerful. 
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Raise Your Standards 


Molly E. 
Holzschlag 


In the not-so-distant past, it was commonplace to use 

HTML hacks, workarounds, and proprietary tags and attrib¬ 
utes to build sites. But hacks and workarounds just don’t 
cut it with the current disparate state of operating systems, 
hardware, and browsers. We need detail, and we need an 
understanding of how markup really functions. 

Most people authoring Web documents professionally 
first learned HTML as an extension of a job outside of 
communications technology. Many authors are in educa¬ 
tion, government, medicine, law, and general industry. 
These people perform Web authoring as a part of their 
weekly tasks, but not as a primary chore. Of course, there 
are many full-time Web builders, but the climate and the 
needs of those authoring professionally have undergone 
tremendous changes in recent years. 

No matter which category you fit into, it’s likely that you 
learned to author Web pages by the bootstrap method¬ 
using View Source, books, online resources, and help from 
friends and colleagues. That’s an extremely effective way of 
learning if your object is to begin authoring pages ASAP. 
But while these early practices were certainly innovative, 
without a framework of literacy in authoring, they did little 
to facilitate interoperability or technological advancement. 

No doubt you’ve heard the word standards bandied 
about, but there are some common misunderstandings 
regarding the definition of standards and how they apply 
to the Web author. 

The Real Meaning of Standards 

A standard is the result of a specific process. Expert panels 
judge and analyze particular mechanical and technical 
issues. If these panels complete their procedural processes, 
they often publish a standard under the auspices of the 
International Standards Organization (ISO). Products and 
technologies adhering to ISO standards can often compete 
more effectively because they support all of the features 
deemed necessary for that product or technology. There are 
other standards organizations, but ISO standards and 
procedures are very strict and highly regarded. SGML, for 
example, is an ISO standard. 

Web “standards” is a bit of a misnomer. While we don’t 
have standards in the sense of ISO official standards, the 
World Wide Web Consortium (W3C) does publish recom¬ 
mendations and specifications for certain issues. 

The Consortium was formalized on December 14,1994. 
It’s an independent, international organization made up 
of people from across the Internet and Web development 
communities—from individuals to representatives of major 
corporations like IBM, Microsoft, Netscape, and Sun 
Microsystems. 


The Consortium oversees the formal organization of HTML, 
as well as the various Web-related protocols and languages, 
including CSS, SMIL, SVG, XML, and XHTML. The Consortium’s 
individual working groups focus on issues within a given tech¬ 
nology. They make recommendations regarding the formal 
practices they believe should be put into use. A recommenda¬ 
tion is a specification on which Consortium members vote. 
Recommendations indicate that voting members agree on the 
appropriateness and best use of a particular specification. 

The W3C recommendations—while based on those of 
the ISO—aren’t true standards. Web markup languages 
aren’t ISO standards, but recommendations are often 
referred to as standards. 

In simple terms, the W3C isn’t the boss of me, or of you. 
Its role is to study technologies and reach a consensus on 
best practices. How you ultimately apply W3C ideologies is 
completely your choice. Following a recommendation won’t 
automatically make your Web site development woes go 
away. In fact, it might just make your daily activities more 
complex. 

Whether to follow W3C recommendations is of major 
concern to the working Web author. At the very least, you 
should know what the recommendations are and under¬ 
stand them. Once you know the rules, you have more free¬ 
dom to innovate and break them, or follow them to find 
out how adherence can strengthen your work. You know 
what you’re doing and why, rather than blindly hoping that 
your practices will make perfect. 

For practical purposes, I consider the W3C a critical 
resource for three groups: 

Web developers. Anyone working on Web sites is affected 
by the W3C. Tracking W3C activities helps Web developers 
work cleanly and stay abreast of the latest issues. 

Browser and user-agent manufacturers. The W3C S 

recommendations extend to any group that’s building 
Web browsers or user agents to access Web-based or Web- 
related documents. 

Visual software developers. Companies interested in 
providing visual Web development software can (and 
should) use W3C recommendations to oversee the way 
markup is generated in a given application. 

The W3C Web site frequently posts new specifications 
and recommendations for these technologies. Anyone 
interested in the history, evolution, use, and future of 
markup or related technologies should visit the W3C 
site regularly. 
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its own internal issues, and its actions- 
while almost always in the best interests of 
professional Web authors-are occasionally 
politicized. 


What You Need To Know 

As you begin to understand how recommenda¬ 
tions can make you a better Web author, I’d like 
to highlight three main issues that will give you 
a better grasp of where recommendations are, 
and where they’re going. These are the issues 
you need to learn well. 

Separate content and structure. You’ve proba¬ 
bly heard me, and others, talk about this inces¬ 
santly. But surprisingly, despite the hubbub 
over this critical ideology, only a minority of 
designers and developers have figured out how 
to do this effectively. 

Separating document content and structure 
is critical because it makes your content so 
much more powerful. No longer do we have to 
author a document just for the Web. We can do 
it for numerous other devices too. We can control 
that presentation with CSS; we can also use 
XSLT to manage our documents. When we 
create documents this way, they become sig¬ 
nificantly closer to meeting accessibility guide¬ 
lines. This opens up a great new opportunity 
for technological advancement. 

Of course, to gain this understanding you 
must study the idea of structure and presenta¬ 
tion very closely, and you can’t do that without 


academic exposure to the principles and prac¬ 
tices of HTML, XHTML, and beyond. Here’s where 
recommendations come in handy, as they 
describe those principles and make recommen¬ 
dations regarding best practices. While the docu¬ 
ments at the W3C are difficult to read at best, 
they contain this information in great detail. 
There are also Web sites and books dedicated to 
raising developer consciousness in these areas. 

Learn contemporary markup. We’re in an era 
where we have multiple markup options. Each of 
these options gives us more room to innovate. 
The more we know about them, the easier it 
becomes to choose the best markup language 
for a given project. See the “Language Concerns” 
sidebar for a range of Web markup languages 
and their primary concerns. 

Learn to read DTDs. Perhaps the most helpful 
thing Web authors can do is to investigate the 
individual Document Type Definitions (DTDs) 
available for all of the Web markup languages 
described above. Reading a DTD isn’t difficult. 

It clearly demarcates which elements and 
attributes are allowed in a given definition. 

I didn’t realize it until very recently, but read¬ 
ing a DTD taught me more about Web markup 


language concerns 


HTML 4.0 

This version introduced three DTDs and clarified 
the need for separation of document formatting 
and presentation. Concern with accessibility, 
internationalization, and better document ren¬ 
dering all contributed to this recommendation. 

HTML 4.01 

Almost identical to HTML 4.0, the 4.01 version 
introduced minor editorial changes to HTML 4.0. 
It’s significant for two reasons: it’s the last 
version of HTML to be published, and it’s the 
foundation upon which XHTML 1.0 is built. 

XHTML 1.0 

By reformulating HTML as an XML application, 
XHTML brings syntactical rigor, document 
conformance issues, and validation to the 


forefront. Remember that all of the ideologies 
and DTDs introduced in HTML 4.0/1 carry through 
as well, but the methodologies have become 
stricter. 

XHTML 1.1 

Version 1.1 gives authors the opportunity to 
write strict documents where no presentational 
markup is allowed in that document, or to tap 
into the power of XHTML modularization. If the 
author uses XHTML modularization, he or she 
can put together modules using selected DTDs 
for customized results. This is extensibility 
in action. The XHTML 1.1 specification also 
introduces the Ruby Annotation, necessary for 
specific kinds of text and most often used to 
facilitate internationalization. 

-MH 


in a few minutes than years of struggling to 
understand specific concepts had. Try it out! Co 
to the Consortium site, pick a Web markup 
language and read the actual DTD document. 

An added advantage of learning to read DTDs 
is that if you don’t yet know how to write them, 
reading them will familiarize you with their 
structure, so that you can try writing one on 
your own. 

The Developer's Voice 

As I mentioned before, the W3C has no official 
enforcement status. It’s an advisory organiza¬ 
tion, which means that it can only encourage 
the adoption of recommendations to facilitate 
efficient information transfer. 

However, the Consortium, while providing a 
rich array of activities, documentation, and 
some tutorials, isn’t an educational or political 
organization. It’s essentially a think tank. The 
Consortium is fraught with its own internal 
issues, and its actions-while almost always 
in the best interests of professional Web 
authors—are occasionally politicized. 

Therefore, as Web authors, we’re personally 
responsible for making implementation deci¬ 
sions within the framework of a site’s markup 
needs. It’s our job to administer recommenda¬ 
tions to the best of our abilities. 

In an effort to encourage fellow authors, 
browser manufacturers, and software developers 
to work closely with W3C recommendations, a 
group of Web designers created an organization 
known as the Web Standards Project (WaSP). This 
organization has been aggressive and successful 
in raising the awareness of all parties involved in 
the advancement of Web technologies. What’s 
more, WaSP has also occasionally criticized cer¬ 
tain W3C policies. Thus, the organization serves 
as an independent public voice. For more infor¬ 
mation on WaSP, see www.webstandards.org. 

End of the Line 

New recommendations and technologies 
emerge with overwhelming speed. Successful 
Web authors must learn a combination of 
self-reliance, awareness of recommendation 
methodologies, and the ability to apply that 
knowledge where it’s fitting. Once we have 
acquired this balance of skills, we’ll have 
a platform that supports far more innovation 
than we’ve ever imagined. >< 

An author, instructor, and designer, Molly has 
been honored by Webgrrls as one of the 25 Most 
Influential Women on the Web. She has written and 
contributed to numerous books about the Internet 
and the Web. Visit her Web site at www.molly.com. 
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Broadband and the Mew 





It should come as little surprise that as users expect more from their 

online experience, bandwidth-cheating technologies like Flash and MP3 
have taken off. We all want the data pipe to get fatter as our ideas for 
new Web technologies get loftier. 

In my six years of Web development, I’ve spent considerable time 
explaining to clients and managers that certain things just aren’t possible 
under current bandwidth limitations. To persuade clients to approve design 
changes, I’ve made them watch in pain as their sites downloaded over a 
56K modem. Similarly, I’ve forced designers to kill beautiful site designs 
because they took forever to download. 

Unfortunately, technology limitations often make our decisions for us. 
But if Web designers were given fat connection pipes today, few would 
know how to use them well. They might throw bigger graphics and larger 
files on their sites, and most would fail to convert the new freedom into an 
enhanced user experience. In fact, significant numbers of developers would 
most likely complicate their sites with useless bells and whistles to the 
point of user frustration and eventual site failure. 

Sober Up 

The term broadband, if used correctly, shouldn’t become obsolete, 
because the potential for a faster connection will always light the way 

online 
resources 


like a beacon of Web developer freedom. Today we regard the “broad¬ 
band age” as a magical, near-future, cyberpunk era in which Web sites 
will load immediately and the Internet will resemble a flashy DVD-ROM 
running in a local disk drive. However, when that day arrives, there will 
no doubt be something better, a newly imagined future paradigm of 
immersive interactivity. Whether we label it megaband or some other 
catchy buzzword, developers will continue to long for the future. 

But what do you know about complex application development? 
Photoshop and Dreamweaver are confined by the often comfortable 
limitations of HTML. But how will you fare in an online development 
profession that looks and acts more like software design than 
Web design? 

As Internet connection speeds increase, users’ expectations of what 
they can accomplish on the Internet will increase exponentially. When 
the Web took off in the mid-’90s, users had such limited expectations 
that search engines and virtual shopping carts wowed them. Now, users 
take these items for granted. They expect to be able to do their banking, 
shopping, and research all on their Web browser. 

In the near future, as users start expecting more from the Internet, 
user tasks will become more complex and interfaces will need to 
become programs of their own, predicting users’ wants, reacting to 


fast, faster, fastest 


QuickTime HabboHotel.com 

www.apple.com/quicktime/www.habbohotel.com 

Apple’s QuickTime hub includes multiple “TV” channels, A hugely-active broadband visual community coded in 

streaming news headlines, and a free downloadable player Macromedia Shockwave. An incredibly immersive (and 

that brings it all together for a clean broadband experience. addictive) environment that shucks all Web conventions 

Heavy.com quite successfully. 

www.heavy.com SETI@home 

Although it’s entertainment oriented and not for the faint setiathome.ssl.berkeley.edu 

of heart, Heavy.com is a good example of interface design Search for Extraterrestrial Intelligence at Home, the most 
that makes use of broadband technologies. Very well-known example of processor sharing, 

dependent on the Flash plug-in. 


A few sites that are 
ahead of their time. 
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BROADBAND AND USER EXPERIENCE 


Vvl III I dole I connection speeds, 
amplified user expectations, on- call user 
preference files, and application-like func 
tionality, you’ll need to design smarter 
interfaces that know who users are and 
what they re trying to do. 
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usage patterns, and making adjustments along the way. Drilling down 
through a Web directory like Yahoo is much simpler than managing a 
portfolio, and current accompanying interfaces reflect that. Although 
the jump in user-experience complexity from a Web directory to a finan¬ 
cial tool is pretty large, we will have some even bigger leaps to make as 
technology and connection speeds race forward. 

So while you tempt your clients with promises of super-fast, 
customer-capturing experiences, consider what it will take to develop a 
compelling experience in such a complex environment. 

Where Are We Now? 

It’s a common belief that as network speeds increase, Web sites will 
start looking more like desktop applications, especially in terms of 
their functionality and interface design. The idea is that the line 
between local and remote applications will become so thin that it 
won’t matter to the user. Assuming that a future desktop computer 
will be continually connected to the Internet via a high-speed 
connection, the user won’t know the difference between an online 
and a local application. Local applications will grab data from online 
databases, and local computers will run applications on distant 
systems. Some applications will use processor sharing. The most 
well-known current example of processor sharing is the SETI(a)home 
project. Other applications will update databases and application 
modules in the background from distant server farms. This new tech¬ 
nology will make your job much more involved as you strive to offer a 
usable environment. 

As a developer you run on two major fuels: client needs and user 
needs. Clients want you to develop sites that increase sales, gather 
demographic data, and improve branding. Users want to complete 
tasks as easily as possible. The expectations of both clients and their 
users will grow as bandwidth increases. This means that you’ll have to 
architect a more complex interface while maintaining an optimal user 
experience. 

Where Are We Going? 

To anticipate the details of this new, intricate user experience we 
must look at current high-end desktop applications like Photoshop, 
Cubase, or PowerPoint. These applications feature complex and 
usable interface structures, contextual menu systems, and 
conditional environments based on numerous factors that are 
constantly updated by user activity. Future Web interfaces will 
depend entirely upon user behavior and will be directed by 
preference files, fuzzy logic, and algorithms that predict how the 
user works. 


With faster connection speeds, you’ll be less 
concerned about load times and overall Web 
site size. Over the past five years, sites scripted 
in languages like Flash and Shockwave have 
increased in size. This growth has been directly 
proportional to the increase in average connec¬ 
tion speeds. As concerns over load time dimin¬ 
ish, so will the differences between Web sites 
and local applications. 

Today’s more complex Web sites include finan¬ 
cial tools and e-commerce sites. Users can regis¬ 
ter their information and store it in a remotely 
hosted database that is recalled each time they 
log in. Aside from personal information, which is 
displayed in dynamic areas of the page, the interface and functionality of 
these Web sites remain constant regardless of the user profile. In other 
words, user A sees pretty much the same thing as user B. User A can also 
do pretty much the same things as user B. At best, user options are limited 
based on their profile, but they still see all of the options or are sent to an 
entirely different site based on a larger user-profile grouping. 

Current local applications let users customize their interfaces, includ¬ 
ing the location of toolbars and expert or novice modes. Some applica¬ 
tions let users add or remove items that appear in a drop menu, or 
create and customize a toolbar that includes their favorite commands. 
Other applications have an expert or novice toggle that optimizes the 
experience for regular users. Expect online applications to begin incor¬ 
porating similar features beyond the basic personalization features that 
are currently available. 

Multilayered Menu Systems 

We’ve already seen a multitude of drop menus and cascading menu 
systems on the Web. Some are coded in Java, others are designed in 
Flash, and yet others are hard-wired in DHTML. However, few appear 
identically on all browsers in all platforms; we’ve all seen the strange 
design bugs that accompany their implementation. Compare a 
DHTML drop menu to one coded in a Flash application. There are few 
similarities between the two, and users tend to look for cues that tap 
into what they know. For instance, a Windows command drop menu 
is always presented in the same manner across all applications. While 
HTML has set similar standards, design plug-ins and new coding 
languages have allowed developers to experiment with new technolo¬ 
gies without remaining grounded in a common interface paradigm. 

It’s easy to see the beauty of the drop menu, especially on sites that 
offer users many options. Opening a Web site with hundreds of options 
available onscreen at once can be a daunting experience, especially if 
your user doesn’t know what to search for. By creating a smart system 
of drop menus and cascading menus, Web developers can clean up the 
interface and mimic desktop operating systems. 

Cascading menu systems can be buggy with certain platforms and 
environments, however, and most require that the browser preload all 
menu items. If the menu system is coded in such a way that it only 
loads menu items after a click, the speed and immediacy of the inter¬ 
face can be completely undermined on slower connections. 

You’ll be ab e to force browsers to preload an entire menu system as 
connection speeds increase. This means you can have more menu layers 
and a more seamless user experience that doesn’t leave users waiting 
for the next menu layer to load. Nothing kills a good Web experience 
more than a click without a response. 
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Conditional Interfaces 

When you select a block of text in Microsoft Word, your toolbars automati¬ 
cally change to display a set of options that is unique to the selected text. 
Look for similar features to be implemented on broadband Web sites. As 
menu systems and site functionality expand, you’ll be able to use condi¬ 
tional interfaces. 

With faster connection speeds, amplified user expectations, on-call 
user preference files, and application-like functionality, you’ll need to 
design smarter interfaces that know who users are and what they’re 
trying to do. Currently, such functionality is severely limited by 
questionable cookie systems and user registration files that are queried 
over precarious connections. 

Users will be more concerned with functionality than with download 
times as bandwidths increase, and it will be imperative that interfaces 
become conditional and micro-functional. Drop menus, for example, 
won’t even be hard-coded into the page. Menu options will be loaded on 
the fly, depending upon where the user’s pointer sits on a page or which 
page he or she came from. You may be able to offer this feature now, 
but slow connection speeds render it relatively useless. 

Tactile Response 

Letting users know that their commands have been entered and their 
tasks are complete is one of the most important aspects of an 
optimal user experience. A simple click sound or dialog box telling 
users that they have successfully completed what they came to do 
goes miles toward improving user confidence 
and trust. 

Users need to know that a command has 
been entered and that the requested process 
has either begun or is complete. We have 
ways of doing that now, but there is little 
consistency in the messages we display to 
users. Some slower sites tell users that a page 
is loading and ask them to wait. Others tell 
users that an order has been received and 
that an email confirmation will follow shortly. 

These measures are meant to assuage concerns over slow load times 
and the wait between command entry and response. While the page 
sits idle and the browser icon rotates, your users’ confidence in the 
efficacy of a command diminishes. 

As the wait time decreases with faster connections, user confidence 
in online applications will increase. When customers enter orders for an 
item from an e-commerce site today, they must trudge through several 
screens, each with a database query and load time of its own. There’s 
even more downtime while customers wait for receipts and email 
confirmation, often many minutes of lagtime after completing the 
transaction. Imagine a future in which receipts are generated immedi¬ 
ately upon purchase; shopper confidence will soar. 

Even better, imagine that a user purchases a piece of software and 
can use it immediately. No waiting for a package to arrive in the mail 
and no shipping charges. While some companies offer software down¬ 
loads along with software purchases, these services are limited by user 
connection speeds and file size. As those concerns become less impor¬ 
tant, more users will forget about the pretty packaging. 

Get Frustrated All Over Again 

There is a dark side to all of this. More possibilities for users means more 
opportunities for them to become frustrated. More choices lead to more 


steps between a task and the ultimate goal. These new, complex, online 
applications will also lead to a higher potential for bugs, a heavier 
dependence on OA measures and customer service, and steeper user 
learning curves. 

Today, user-experience experts and quality-assurance engineers 
have the relatively straightforward duty of testing whether users 
can complete a finite number of tasks. As Web sites incorporate more 
complex tasks, the number of potential page flow routes and user goals 
approach infinity. Therefore, designing and testing an optimal user 
experience becomes increasingly difficult. 

Consider an e-commerce site. If you were to design a way to test the 
efficiency of that site’s interface, you would come up with a finite 
number of projected user tasks. For example, you might look at the abil¬ 
ity to search for a product, browse a category, add an item to a shopping 
cart, and purchase the item. 

Now imagine that same e-commerce site as both the source and the 
fulfillment mechanism. That is, if customers were to buy the latest 
Britney Spears album at a future e-commerce destination, they wouldn’t 
just check out and wait for the CD to arrive in the mail. Instead, they’d 
download the entire album as a file to play at their leisure. Suddenly, as 
a developer, you’re charged with coming up with and testing a 
compelling fulfillment process that was once the responsibility of a 
warehouse in New Jersey. 

Next consider a personal finance site. Users can check their balances, 
pay bills, transfer funds, and do some basic investing and trading. 


Testing this experience is a finite event: test against the users’ goals and 
make changes based on their responses. 

Finally, imagine a broadband world in which any connected computer 
can be turned into an ATM, generating legal tender on the spot. Security 
measures like retinal scanning and signature matching, which are 
currently limited by bandwidth issues, are no-brainer necessities here. 
However, testing such systems and assuring that they provide a seam¬ 
less experience becomes a huge task. The number of possible errors and 
security checks are enormous. 

Good Problems 

Clearly, the benefits of a world in which load times are no longer 
a concern and computers resemble today’s mainframes far outweigh 
the concerns over creating hugely complex user experiences. But as a 
Web developer, your job will begin to look more like that of a software 
developer. If you get used to thinking that way now, your users will 
thank you in the future. >< 

Joshua is principal of Fruhlinger Consulting, a user experience consulting 
firm. He is also a writer, speaker, and creative director. You can contact 
Joshua and learn more about him at www.fruhlinger.com. 


, 


OU WMI Lc you tempt your clients 
with promises of super fast, customer- 
capturing experiences, consider what it 
will take to develop a compelling expert 
ence in such a complex environment. 
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Adobe’s Foray into CMS 

On a recent project I had to design and build 

templates for thousands of members of the 
Weblog community Xanga.com. Users wanted 
to be able to customize their Weblogs exten¬ 
sively. After talking it over with various team 
members, I made the executive decision that 
image-based titles, navigation tabs, and other 
graphic elements would be too limiting and 
not customizable enough for our needs. Thus, 
we went for pure HTML instead. With Alter- 
Cast, the project would have gone differently. 

A recent exploration of Adobe’s foray into 
server-level content management has changed, 
or rather, totally eliminated, my concerns about 
the constraints of using images in templates. 

AlterCast is imaging server software 
designed to integrate with existing content 
management systems and help maintain the 
ocean of graphics used in e-commerce sites 
like Amazon.com and Outpost.com. It auto¬ 
mates the creation and repurposing of pictures 
and eliminates the repetitive nature of tweak¬ 
ing and reformatting them for various needs. 
But I can’t help thinking how killer AlterCast is 
for users of a site-building tool like Xanga. It’s 
like having a team of graphic designers and 
Webmasters on call. 

AlterCast supports PSD, JPEG, PNG, GIF, 
animated GIF, WBMP, TIFF, SVG, and l-mode 
wireless formats. This is an impressive array- 
especially with the addition of the XML- 
powered interactivity of SVG. However, with 
something like 95 percent of Web users having 
the ability to view SWF content without need¬ 
ing a new plug-in, and with more than 300 
million downloads of the Flash player, it would 
have been really nice to see support for SWF. 

How it Works 

AlterCast is installed on a server (Sun Solaris or 
Windows NT/2000) and scripts are created by 
developers so that key layers of Photoshop 
documents can be edited dynamically from 
within the user interface. Scripts can be devel¬ 
oped to handle almost any need. A single 
image can be repurposed for high resolution 
print, Web optimization, and even wireless 


devices. Creative scripting can weasel its way 
in too. A script could be created so that after 
someone has visited a product three times on 
a site, a special starburst appears over the 
image that says, “Now 52 percent less!” just to 
close the deal. 

This means that I don’t have to run to my 
Powerbook six times a day to change some 
text on a banner ad, or even worse, hand over 
some Photoshop files for clients to do with as 
they please. With AlterCast, I need to create a 
Photoshop document only in the beginning. 
After that, site editors can change ad text, 
background colors, or prices over images— 
from within a server environment—and the 
initial design remains intact. It’s all about 
the scripts interacting with Photoshop and 
its many features. 

Using AlterCast 

I wish I’d had AlterCast when I was working 
on Xanga.corn’s user templates. I could have 
accepted a profile image—in almost any 
format—and integrated it so nicely. AlterCast 
automatically resizes the image, sharpens, auto¬ 
contrasts, and then optimizes it for the Web 
with ImageReady tools. 

But that’s small potatoes. For text, 

AlterCast can follow a script to replace text 
within a PSD layer, Illustrator file, or ImageReady 
animation document on the fly while main¬ 
taining support for layer effects like drop 
shadows, embossing, anti-aliasing, trans¬ 
parency, and animation. The files contain all 
of the design information so you can write 
scripts to interact with any layer or attribute 
specified. 

This feature is great for users who want to 
make a custom graphical text header over a 
background image (or transparent back¬ 
ground). Once the script is in place, your users 
will be able to enter text into a field. The script 
goes to work, and the text layer in the original 
Photoshop file—with drop shadows, glows, and 
other effects—is selected, changed, and output 
into a specified image directory as a Web- 
optimized GIF or JPG. 

Another project I worked on for a content 
management ASP, called WebCrimson, required 
customizable banner ads. The clients only 
wanted a few designs, but they wanted to be 
able to change the text as they saw fit 
I tried creating part GIF, part HTML barners, 
but these were a mess. A client equipped with 
AlterCast can interact with all layers 
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and text of a Photoshop document to create 
iteration after iteration, long after you’ve 
finished the job. 

Under the Hood 

AlterCast has an open architecture that makes 
for easy integration into databases. The same 
is true of content management systems like 
Documentum. The software’s support of APIs 
for Java, Perl, Visual Basic, COM, and .Net 
environments should let programmers write 
scripts with familiar tools. Its XML-based 
commands allow it to manipulate images 
seemingly by itself over in the specially 
cooled server room. 

Glimpse Into the Future 

With the popularity of do-it-yourself advertis¬ 
ing like Google’s AdWords program on the 
rise, I wouldn’t be surprised to see a do-it- 
yourself banner-ad program powered by Alter- 
Cast’s Photoshop-harnessing server software. 
People could choose from hundreds of tem¬ 
plates, colors, fonts, and so on to design their 
banner ad, and then launch the campaign 
themselves with a credit card. 

Access to the power of Photoshop with the 
scalability of a server environment wins big 
points for businesses that demand a high 
turnover for image repurposing. But at $7500 
for use on a single CPU and $60,000 for a 
multi-CPU license, AlterCast is exclusively for 
the big guys. When Adobe released its pared 
down version of Photoshop, Elements, I was 
amazed at its robust Photoshop-ness. I hope 
AlterCast does well enough in its business 
environment that Adobe will develop a lite 
version for consumers. I would love to have 
that kind of power to offer to a client, with¬ 
out the heavy price tag. 

—Biz Stone 


Biz is a graphic designer and writer with a keen 
interest in content management. For more Biz, 
check out his Weblog at www.bizstone.com. 


26 


www.webtechniques.com february 2002 







































I 



Pulse Animation Studio 5.0 

Pulse 

www.pulse3d.com 

$3000 per year 


From Games to 3D on the Web 

If you look at the number of technologies 

currently competing for the lead in 3D on the 
Web, it’s easy to get caught up in the techni¬ 
cal specifications. While it’s important to 
understand the differences between the 
technologies and how and why they work, 
mechanics are only part of the equation. 

More important are the tools used to create 
content. After all, developers are quick to take 
advantage of well-designed tools, especially 


Pulse Producer is an application that caters 
to developers with existing 3D Studio Max 
skills. Once Pulse is installed, the Producer 
tools are available inside 3D Studio’s Utility 
panel. Thus, users who are already comfortable 
with the interface can take advantage of the 
Pulse tools with little effort. They can create 
their content as usual and then preview work 
in a Web browser when they’re finished. 

The final piece of the equation is the Pulse 
Player, a free Web browser plug-in that enables 
delivery of Pulse 3D content to a variety of soft¬ 
ware and hardware platforms. Currently, the 
player is only a 370KB download in its most 
basic state. However, you can download 
optional components as well. The Pulse Player is 
available for Internet Explorer 4 or above, 
Netscape Navigator 4 or above, and AOL 4 or 


. 

Pulse has attempted to 

create a relatively general- purpose set of 
programs that can be used in everything 
from games to e- commerce sites. 
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those that let them use their current skill 
sets. The importance of developer support 
becomes obvious as more and better content 
draws increased consumer interest. Undoubt¬ 
edly, the end user will ultimately decide on 
the winners and losers in this arena. 

Pulse 3D, one of the players in the 3D compe¬ 
tition, appears to understand this issue. It is 
taking advantage of applications such as 3D 
Studio Max, the standard in 3D-character and 
virtual-environment development for games. 
Pulse was founded in the early 1990s, and you 
may already be familiar with its work in the 
game space. The company released an 
extremely popular game called “Iron Helix” and 
in doing so, pioneered 3D rendering for CD-ROM 
games. Pulse continued game development for 
several years and had other quality releases 
such as “Bad Mojo.” Then in 1997, the company 
turned its attention to the Web with Animation 
Studio, now in its fifth version. 

A Complete Package 

Pulse Animation Studio is a suite of applica¬ 
tions that consists of Pulse Creator, Pulse 
Producer, and Pulse Player. Pulse Creator is a 
stand-alone authoring environment that lets 
developers author and publish their 3D stream¬ 
ing content on the Web by giving them com¬ 
plete control over the way content behaves and 
appears on the Internet. 


better on Windows-based machines. Addition¬ 
ally, Pulse supports Mac OS with Netscape 
Navigator 4 or above. The hardware require¬ 
ments are minimal and any relatively recent 
machine will suffice, although the Pulse Player 
takes advantage of OpenGL and Direct3D video 
cards if these are available on the system. The 
plug-in delivers real-time 3D rendering with 
several interesting features, including reflection 
mapping, anti-aliasing, and animation (which 
supports inverse kinematics, streamed audio 
synchronization, and interactive behaviors). 

Although there are a few new features in 
Producer version 5—such as light map previews 
and mono channel output for Alpha and Bump 
Maps—the new options available in Creator will 
probably receive the most attention. 

Creator 5.0 now supports a new scene-wide, 
hardware, anti-aliasing algorithm. This algorithm 
is unique in that it’s applied to the entire 
scene, instead of making calculations based 
on individual objects. Because it doesn’t need 
to find the edges of the individual objects to 
calculate the pixels used to smooth out aliasing 
problems, it’s a much faster implementation 
and requires little processing power. With 3D 
streaming projects, even very small changes 
can make a big difference for the end user who 
is executing the project. 

Another setting that’s now available in 
Creator is high compression that cuts 



A complete suite of 
applications that 
can be used with 
tools like 3D Studio 
Max. 


The documentation 

is lacking, which can 

be frustrating, as 

third party books 

and other training 

options are limited. 

* 




geometry file sizes by nearly 50 percent, 
resulting in faster downloads for end users. 
As you decrease the number of a model’s 
polygons, some degradation occurs. Creator 
lets you customize the compression so that 
you can limit the degradation for your partic¬ 
ular models and project. This means you can 
get the right mix of quality and file size. 

Another feature that helps limit file sizes is 
the ability to use MP3 audio in your projects. 
Previous versions allowed WAV and AIFF sound 
files, and these are still options. Creator uses 
a time-based score that lets you accurately 
synchronize sounds to object movements. 

You can add sound effects or even synchronize 
speech to a 3D character’s opening and closing 
mouth. To accompany the MP3 support in 
Creator, Pulse Player also supports MP3 in non¬ 
streaming or streaming modes. 




3D to Be 

3D has long been a popular idea for the Web, 
but adoption has been relatively slow. Like 
other vendors in this area, Pulse has attempted 
to create a relatively general-purpose set of 
programs that can be used in everything from 
games to e-commerce sites. Although this is 
obviously an ambitious concept, Pulse is as 
far along as any other company. Its tools are 
top-notch, but the existing documentation is 
occasionally lacking. The Pulse Player plug-in 
performs well on almost any machine. This 
includes low end systems that don’t have 
hardware acceleration and that use 56K 
modems. Their high-end counterparts can take 
advantage of hardware such as OpenGL or 
Direct3D accelerated video cards. Pulse has 
taken an already solid product and added even 
more features in this latest release, making 
Pulse Animation Studio 5 an even more 
compelling solution for Web developers. 

—Clayton Crooks 


Clayton Crooks is the author of Learning Visual 
Elasic through Applications and is currently writing 
Palm OS Programming by Example and 3D Game 
Programming with Direct X 8. You can reach him 
via his Web site at www.claytoncrooks.com. 
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Do CDNs Live Up to the Hype? 

Jqy lyman _ 



Content distribution network (CDN) providers promise to make life 

easier for system administrators. CDNs will cut a company’s bottom line 
by reducing the need for servers and bandwidth, while simultaneously 
pumping up profits through faster site performance—or at least that’s 
the claim. But some administrators say that using a CDN represents 
nothing more than the denial of an underlying infrastructure problem— 
a crutch that will eventually become too expensive to support. 

Those who stand by their use of CDN providers say it all depends on 
the deal you get. Indeed, few administrators seem willing to say they’re 
closing their options when it comes to these networks. Although 
battered by the downturn, CDN providers like Akamai and Digital Island 
are working hard to make their offerings more attractive. By changing 
and consolidating with other managed services, these companies plan 
to remain prominent players in today’s hosting market. 



Two Speeds: Idle and Fast 

In October, Cambridge, MA-based Akamai was being deployed on 1000 
different networks, with some 13,000 servers in 63 different countries, 
according to Director of Product Management Kieran Taylor. Similarly, 
Tim Wilson, chief marketing officer for San Francisco-based Digital 
Island, says his company boasts 21 of the top 50 Fortune 500 companies 
as clients, with more than 2600 servers in 35 countries. 

Despite their evolution from the days of deep IT budgets, many 
services offered by these CDN providers remain essentially the same. 
However, there’s good reason for the ongoing interest in the services 
they provide. 

Content distribution networks move a site away from centralized 
servers, toward the so-called “edge” of the network-to far-flung 
caching servers that store content close to end-users. By distributing 
load and decreasing the number of network hops between each piece 
of content and its destination, these edge servers are better equipped 
to handle the sudden Internet traffic spikes that come with big events 
like the Super Bowl or the September 11 terrorist attacks. 

CDNs sell themselves as an alternative to the “unwieldy infrastructure” 
(as Akamai’s Taylor puts it) that most sites rely on to handle sudden heavy 
loads. “The majority of enterprises have infrastructure that’s idle 90 


mmmsmmimim 


percent of the time,” says Taylor. “They have to over-provision hardware 
and resources to overcome spikes. We’re a solution to over-provisioning 
that enterprises use to achieve scalability, reliability, and performance.” 

As Digita Island’s Wilson points out, a beefed-up data center with 
added hardware and bandwidth may improve performance somewhat, 
but not on the other side of the world. “Buying more network pipes 
doesn’t mean your site in the UK is better,” he says. 

Seconds Count 

Although subscribing to a content distribution network can be expensive, 
to SportsLire.com president of operations and CTO Dan Leichtenschlag, 
a 15 percent faster load time makes it worth the cost. He adds that what 
he pays for his site’s CDN service isn’t far above what he would pay to 
deliver the content anyway. 

“It’s going to be fewer hops from the content to the user,” 
Leichtenschlag says bluntly. “The way I look at it, it depends on your 
deal. What we pay is a reasonable premium over what we pay for 
bandwidth. Our deal is essentially a wash. If I had to buy all of the 
equipment ’d need at peak load, I’d have to buy a bunch of machines 
and rent more space and pay for bandwidth anyway. But as a bonus 
[of using a CDN], I get speeded up—that’s a great tradeoff.” 

Leichtenschlag, whose NFL.com site sees peak traffic every football 
Sunday, says his cost analysis was fairly straightforward. For 
SportsLine.com, going with a CDN provider was a no-brainer. “We 
have three data centers. They have a lot more,” he says. “Why manage 
the hardware if you’re going to pay the same?” 

ESPN.com is another sports site that periodically sees heavy band¬ 
width demand. CDN service is ideal for ESPN because of its “peaky 
traffic driven by events,” according to Vice President of Technology 
John Zehr. “It’s great to leverage their edge content delivery,” he says, 
explaining that ESPN.com takes advantage of both static image and 
full site delivery. “It puts both the bandwidth and server capacity on 
their shoulders. Certainly, they’ve saved us on huge traffic days.” 

Zehr says it would be impractical to build out the data center for 
ESPN.corn’s expected five-fold increase in traffic during peaks, adding 
that a CDN provides a layer of redundancy that a home-grown infra- 
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Fast performance often isn’t 

enough to entice newly budget-conscious site 
operators to sign on with a CDN. To keep their 
services attractive, companies like Akamai 
and Digital Island are busy developing new 
features to add to their portfolios. 


! structure could not provide. “It just doesn’t 
j make sense from an architectural standpoint 
: to scale when you’re not going to generate that 
type of load” on a consistent basis, Zehr adds. 

Is the Price Right? 

There is still debate, however, over how much 
actual performance CDN services can deliver. 

Many argue that just as much improved 
performance could be achieved simply with 
faster servers. 

In Senior Analyst Seema Williams’s research 
for Forrester she indicated that ESPN.com experienced faster download 
times “because the content distribution servers at the edge of the 
network responded to requests faster than the origin servers did, not 
because content delivered from edge servers didn’t traverse the 
public Internet.” 

“When we’re talking about server speed not really being optimized 
and being slower than what a content distribution network can deliver, 
yes, absolutely, that is often a band-aid approach,” Williams explains. 
She adds that CDN providers can address several smaller content delivery 
issues. “CDNs are a way to holistically answer or solve a whole series 
of individual, small problems.” 

Even Akamai’s Kieran Taylor is quick to point out that speed, while 
commonly confused as the only real advantage of a CDN, is an “ancillary” 
benefit, characterizing performance as merely a part of the return on 
investment (ROI) that Akamai delivers. “Performance can translate to 
profit,” he says. “Our sales pitch, first and foremost, is ROI. Speed is 
the sweet benefit, but seconds do count.” 

Digital Island’s Tim Wilson echoes the sentiment, calling speed 
and enhanced user experience “the special sauce that goes on top” 
of edge-content-distribution services. “There are certainly people who 
in-source this stuff, but there’s a huge expense that accompanies that 
central approach.” 

Wilson refers to ROI findings from Giga Information Group, published 
in October, to support his company’s approach. Enterprise companies 
using the CDN provider’s 2Way Web Services “experienced substantial 
benefits including cost savings, reliability, security, performance, and 
flexibility,” according to the research firm. 

This translated into a much more rapid return on investment. 

Giga said Global 500 companies that used the integrated hosting and 
content delivery solution from Digital Island saw payback in an average 
of three months, with an average savings of more than $890,000 a year. 

Those figures might not apply to every case, however. CDN clients 
like Sportsline.corn’s Leichtenschlag and ESPN.com’s Zehr say that the 
cost effectiveness of using CDN providers depends largely on the terms 
of the contract, and contracts can vary greatly. “We revisit [our deal with 
our CDN provider] every time the contract comes up,” Zehr says. “We 
look at our footprint and our content demands and figure out what 
makes the most sense.” 

Zehr adds that ESPN’s size may make it easier to obtain a good 
contract for content distribution. “It might be harder for smaller 
companies. It might not be a good deal.” 

Assess Your Stress 

Even among larger accounts, not everyone believes that the CDN 
approach is the way to go. Take Clifford Lopez, North American director 
of technology for Tribal DDB Worldwide, a consulting, marketing, and 


e-commerce services provider. Lopez, whose firm counts Anheuser- 
Busch, Reuters, Microsoft, and PepsiCo among its clients, characterizes 
using a CDN as putting “a band-aid on something that’s festering.” 

Lopez maintains that laziness, more often than the bottom line, is 
what convinces Webmasters to sign on with CDNs. “Their basic angle 
is: It’s latency in the Web that’s causing your users to have a slower 
site,” Lopez scoffs. “I’d look more to the architecture. You can move 
content closer to the edge, but the idea that it’s the fix-all for bad site 
performance...our site doesn’t have those problems.” 

Tribal DDB s PepsiWorld Web site, which serves up streaming Britney 
Spears video clips and offers users merchandise they can buy online 
with bottle caps, uses no CDN. The real question to ask, Lopez says, is 
“how much stress is your system under?” 

“It’s not so scientific, it’s not some black art,” he says. “They take the 
stress off your network, but unless you have huge amounts of traffic 
and you’re a news site or Yahoo!, it isn’t worth it.” 

Plenty of 11 and system administrators agree with Lopez’s assessment. 
So does Forrester’s Seema Williams. “Using a content distribution 
network is one of those things that makes your site faster and cooler,” 
she says, “but unless you’re a really high-profile content site like a 
CNN.com, it’s not necessarily cost effective.” 

Lopez is skeptical about the CDN solution’s reliability as well. “It isn’t 
a cure-all. It’s still a system that can be broken. Every system can be 
broken,” Lopez continues, adding that he is paid to be a pessimist. He 
estimates that his cost of bandwidth would nearly double if he used a 
CDN provide to move static content to the edge, yet his site performance 
would improve only by milliseconds. 

To Lopez, Akamai and Digital Island offer only “false hope,” and he 
finds the CDN solution a lazy one. “It doesn’t save me any time,” he says. 
“Really, they haven’t solved the problem, they’ve just covered it for me.” 

“Is the appearance of a faster site to consumers worth double the cost?” 
Lopez asks. “If you have a site that’s built clunky, all you’re doing [with 
a CDN] is speeding up clunkiness. It’s usually a more systemic problem. 
Deal with that, and you might not have to go [the CDN] route.” 

Struggle For Survival 

Faced with such skepticism, the future for CDN providers might not be 
too rosy. According to Williams, a lot has changed since the dot-com 
dollar days. Fast performance often isn’t enough to entice newly 
budget-conscious site operators to sign on with a CDN. To keep their 
services attractive, companies like Akamai and Digital Island are busy 
developing new features to add to their portfolios. 

“They’ve added a whole bunch of new things, mainly around the distri¬ 
bution of personalization,” says Williams. “Now, instead of just caching a 
graphic or a piece of content at the end of the network, they’re pushing 
out some rules about personalization—primarily based on geography. 
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So if a consumer is coming in from Germany, then they automatically get 
the German version of the particular site. That’s definitely a cool thing.” 

CDNs are also turning to other avenues in their fight to stay alive. 
Some are consolidating their networks, while others are courting for 
acquisition. They have also tried integrating their technologies with other 
services, primarily hosting. But Williams points out that hosting providers 
that resell content delivery networks are already “falling off the map.” 

However, ISPs are keen to keep content on someone else’s edge 
network, rather than try to compete with existing CDN players. “We 
think [CDN services] will be in part resold by some carriers who decide 
it’s just not cost-effective to try to build content distribution networks 
themselves,” Williams says. 

The surviving CDN providers have also changed their focus from pure 
e-commerce and media Web sites to major-league enterprises. Digital 
Island clients include American Express, Bloomberg Television, and Cisco 
Systems, while Akamai serves such high-profile companies as Coca-Cola, 
Columbia House, and Xerox. In fact, 85 percent of Akamai’s revenue now 
comes from enterprise clients, according to Taylor. Because of this, 
Williams believes the original CDN may end up being the only true 
survivor, and may become profitable in the first half of 2002. 

Further, as she predicted in her Forrester report, CDNs have consolidated 
into the hosting and networking spaces through deals with Genuity, 
Exodus, Digex, and other “bandwidth guys,” as Lopez calls them. 
“There aren’t a lot of CDNs left standing,” Williams observes. “We’ve 
seen Digital Island go the way of acquisition, Mirror Image is still hanging 
out there, and Akamai is obviously the big kahuna, so there really isn’t 
much left to consolidate.” 

Alternative Methods 

While there may be only three CDN service providers left, the edge 
content serving and caching technologies they provide will see 
increased use down the road, according to Williams. However, she 
believes that their core customer base won’t grow much further than 


the most bandwidth-hungry sites. Other techniques, she says, can 
deliver just as much performance for lower traffic sites. 

“You might want to do a little bit of mirroring your site in certain 
major locations,” Williams explains. “You might want to do it for Europe, 
you might want to do one for Asia-but getting much more aggressive 
than that may not be necessary for most mid-tier and lower-end 
content sites on the Web.” 

Clifford Lopez, on the other hand, keeps Tribal DDB’s Pepsi.com site 
up to speed the old fashioned way. He deploys redundant bandwidth 
and boxes, and keeps a sharp eye open for any unexpected “Britney 
breakouts” or other spikes in traffic. CDN services, he maintains, don’t 
provide bang for their buck. 

“Their promise is that your user will notice that your site is not 
slow,” he explains. “We think there are other ways to solve problems- 
and we don’t have to spend extra money. Is it a perfect solution? No, 
but the Internet isn’t perfect either. The Internet is a loose federation 
of pirate ships. We rely on other systems. That’s what makes the Net 
grow; that’s what makes it beautiful.” 

Caching and edge serving will continue to be a part of serving content 
and applications on the Internet, Williams says. “What [enterprises] are 
seeing is a need to optimize the use of their networks, so you’d imagine 
that caching equipment would be a totally viable way to do that.” 

Then again, Williams hastens to add, “it’s not necessarily content 
distribution service from somebody like Akamai.” 

But even Clifford Lopez admits that a content distribution network is 
likely to creep into his infrastructure sooner or later. He continues to watch 
the nascent partnerships in the industry closely. “The minute you say ‘no 
way’ on the Internet, you're going to get burned,” he says. “If [content 
distribution] becomes part of the hosting, database, or other service 
offering-not a line item-then OK. I’ll try anything if it will help.” >< 

Jay Lyman is a reporter for NewsFactor Network, a daily technology 
news service. 


distributed content distribution? 


Traditional content distribution network (CDN) providers have fallen on 
hard times recently. Confronted with ever-tightening IT budgets, they’re 
struggling to lure customers with new features and cost-effective part¬ 
nership deals. And if they didn’t have troubles enough already, now a new 
class of CDN company has begun to arrive on the scene. Undaunted by the 
woes of existing CDNs, these startup players are using peer-to-peer (P2P) 
technology to take a distributed approach to content delivery. 

Classic CDN providers like Akamai and Digital Island bring their clients’ 
data closer to end users by hosting their own caching servers in making 
data centers around the edge of the network. P2P solutions from compa¬ 
nies like CenterSpan (www.centerspan.com) approach the problem from a 
different angle, end-user machines themselves part of the caching net¬ 
work. The result is a dramatically reduced capital investment by the CDN 
provider and, according to CenterSpan chairman and CEO Frank Hausmann, 
as much as 90 percent customer savings over traditional CDNs. 

P2P content distribution techniques vary. Typically, end users must install 
a small background application or browser plug-in on their systems to 
receive CDN-cached content. Some systems, like CenterSpan’s C-Star net¬ 
work, cater to content caching, while others, such as Diffuse Network’s 
AllCast (www.allcast.com), specialize in streaming media. In either case, 
similar to multicast routing, the goal is to create a one-to-many network¬ 
ing relationship that places fewer burdens on the content provider’s 
infrastructure. 


Other products in this space include ChainCast Networks (www.chaincast.com), 
OpenCola SwarmCast (www.opencola.org/projects/swarmcast.shtml), and 
Kontiki (www.kontiki.com). Numerous vendors have products that aren’t yet 
ready for market. 

Every entry into this burgeoning field faces similar challenges, however. 
The most important challenge is the question of how to maintain quali¬ 
ty of service when end-user machines are doing the actual work. Unlike 
dedicated servers, the security, reliability, and network connectivity of 
end-user hardware are beyond the CDN provider’s control. CDN providers 
may also end up butting heads with consumer ISPs, which budget their 
own network resources under the assumption that their subscribers 
will be browsing, rather than serving, content. What’s more, it remains 
to be seen whether CDNs will even be able to convince sufficient num¬ 
bers of end users to participate in such a scheme. 

Faced with this daunting set of hurdles, peer-to-peer CDN solutions 
have some work ahead before they become as trusted and entrenched 
as the existing, managed CDN providers. If they can overcome even a 
few of their difficulties, however, it’s possible that P2P distribution 
networks will become an attractive, lower-cost alternative for efficient 
content delivery. 

-Neil McAllister 
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Streaming 

Media 

Steps up to the Plate 

Major League Baseball’s Internet Ambitions 


Jennie Rose 

Give $90 million over four years to build and maintain a Web site, 

appeal to baseball fans fanatical enough to use their mobile phones to 
check scores, then charge for Webcasts of the games, and how could 
you lose? In the summer of 2000, Major League Baseball had this plan in 
mind when club owners voted to centralize all Major League Internet 
operations under the umbrella of an official league site at MLB.com. 

Each of Major League Baseball’s teams are contributing $1 million per 
year to MLB’s Advanced Media (MLBAM) group, which maintains the 
MLB.com site and infrastructure. According to spokesman Jim Gallagher, 
the site has funding commitments from all the teams that extend for a 
four-year period. 

Unveiled on April 1, 20m after a five-month-long development 
process, the relaunched MLB.com site gives visitors access to stats, 
summaries, and even pitch-by-pitch re-enactments of games. Perhaps 
the most interesting site feature, though, is a video-on-demand system 
that lets consumers not only watch their favorite games online, but also 
create custom clips and instant replays. Instead of sticking with a 
revenue model that relies on advertising, as other sports sites and video 
providers have done, MLBAM decided to put together a subscription- 
based service for the video-on-demand features. 

Incentive 

Site traffic analysis always showed that visitors to MLB.com were loyal, 
but whether those visitors could be converted into paying customers 
was a matter of incentive. Fortunately for MLBAM, fans already flocked 
to the site for the existing content, and it was a good bet that the free 
Daily Cuts video service would create demand for more video streams. 
What’s more, many visitors seemed willing to pay at least $2.95 for a 
two-day “rental” of what MLBAM refers to as Baseball’s Best Games. For 
the first time, fans would have easy access to classic games like the 1952 
World Series. 

Nearly three months after the launch, MLBAM was confident 
enough in the popularity of its streaming video that it released a new 
product for the site. The Custom Cuts video service lets subscribers 
create their own videos of instant replays for $24.95. To help gain 
more subscriptions, MLBAM packages live game broadcasts together 


with the Custom Cuts service. Together, the Daily Cuts, Baseball’s Best 
Games, and Custom Cuts products form one of the strongest video- 
on-demand services available. 

Strategic Partners 

It’s no secret that streaming media is the method of choice for serving 
video across the Internet. Unfortunately, streaming media is known for 
its vulnerability to technical glitches and service outages that can infuri¬ 
ate paying customers. Companies looking to bring streaming media 
to the masses face a major business risk if they can’t deliver quality. To 
improve the odds of success, MLBAM decided to outsource the video 
encoding and distribution to several technology partners. 

Before it could sell video-on-demand, MLBAM knew it needed to 
acquire the video, encode it into a popular streaming media format, 
index the content so it could be searched, and then upload everything 
to a location where it could be distributed to end users. Joe Choti, CTO 
of MLBAM, notes that the goal was to avoid reinventing the wheel. A 
project of this scope requires a large infrastructure investment—some¬ 
thing that not every content provider should deploy in house. For 
MLBAM, the infrastructure needs were costly enough to justify 
outsourcing. 

“Streaming in our case could be very expensive,” says Choti. “Think 
about a game that’s three to four hours in duration. Think about the 
cost to encode those three hours, the equipment and cost of digitally 
encoding it. Think about the cost of storing three hours of that stream 
permanently in your data warehouse. Think about the pipes you would 
need to push that high a volume of bits out of your infrastructure, and 
think of the multiple points of presence required. All of these are signifi¬ 
cant dollar investments.” 

MLBAM eventually chose RealNetworks for the streaming video 
format, and Virage for the acquisition, encoding, and indexing of all 
video. For content distribution, MLBAM relies on Real Broadcast Network 
for the Custom Cuts product, and on Akamai for all other media. Choti 
could not comment any further on the selection process, including the 
details behind the three-year RealNetworks deal. He admitted that there 
were other contenders, but “for business reasons, we chose Real.” (Real 


february 2002 www.webtechniques.com 33 











































Scoreboard Teams/Players Hews Stats Schedule Standings Tickets Fantasy Auction Shop 


Transactions Injuries Mino r Leagues History Kids Fan Forum Events World Se 

111.26.01 


SimSeries 

All eyes were on Babe Ruth toe 
as he took part in a SimSeries 
doubleheader: the 'Murderer's 
Row" Yanks from 1 927 advanc 
to the next round, but the 1918 
Red Sox suffered a fate all too 
familiar to Boston fans. More > 

fEREE AGENTS: 
o Free Agent Watch 
o Free Agency FAQ 
MORE NEWS: 

o Media Beat: Contraction talk 
dominates coverage 
o Owners' Tuesday meeting coulc 
bring some answers 


MLB.com Shop Special 


This week only: Rec 
shipping on all ordei 
or more in the ML6.» 



SimSeries: Murderers' Row routs D-Rays 


Oates is keeping the faith 


Media beat: Baseball to reclaim center stage.. 


Window shopping: Teams peruse free-agent market 


World Series video available for first time on DVD 


Omaha Royals hire Bucky Dent as manager 


Former nitrhfir Rn Etelinskv passes 


mMirn, 


FREE 

SHIPPING* 


Baseball's Best Video 


THIS JUSTIN: 196 

Series, Game 1: E 

fans a Series-recor 
five-hit shutout. 

Go to Baseball'; 



figure 1 


Major League Baseball’s official site features video-on-demand. 


founder and CEO Rob Glaser is part owner of the Seattle Mariners, but 
there was no comment on whether that had any effect on the deal.) The 
total cost to MLBAM over the three year term of this agreement is $20 
million, and consists of RBN hosting services, advances against revenue 
sharing, and cash payments for branding and promotion. 

User Experience 

Choti emphasizes that user profiling was a major factor in MLBAM’s 
development approach. When deciding how best to serve video to 
customers, Choti and his team considered the fact that most of the 
MLB.com target audience does not have broadband-enabled Internet 
connections. 

According to a 2001 study by IDC, an increasing number of house¬ 
holds are investing in faster modems and high-speed Internet connec¬ 
tions, with 51.2 percent of online users reporting that their modems 
achieve speeds of 56Kbps or faster. 18.8 percent of online households 
subscribe to a high-speed Internet access service, compared with 11.7 
percent a year ago. 

But a 7.1 percent broadband growth rate is simply not fast enough to 
ignore the lower speed connections. With this in mind, MLBAM config¬ 
ured most of MLB.com’s video so that it could be viewed at a low bit 
rate over a dial-up connection. Serving streaming media for a baseline 
connection speed of 56Kbps, MLBAM uses fairly heavy compression on 
its video. The site uses multiple compression rates depending on the 
product. In the case of Custom Cuts, MLBAM encodes two streams- 
one designed for dialup (56Kbps) users, and one for broadband 
(300Kbps) users. 

“The quality of the video is not compromised when levied against 
the people that you would shut out if you didn’t compress it heavily,” 


explains Choti. “You have to say that most 
users today have 56Kbps modems or higher, so 
let’s baseline at 56Kbps and see if we can push 
it out. Those products that we can’t compress 
become broadband projects, and we just let 
the fans know that we understand they don’t 
have broadband, but there’s no other way to 
deliver the product.” The Baseball’s Best 
Carnes product, for example, is only available 
in a 300Kbps broadband version. 

Custom Development 

When it came to adding e-commerce function¬ 
ality to the site, MLBAM decided against using 
a third party provider, opting instead for its 
own modular subscription architecture. MLBAM 
developed its authentication scheme to protect 
the content, utilizing user account level secur¬ 
ity to control access to key pages and servlets 
for Custom Cuts. 

Justin Shaffer is the lead developer on 
Custom Cuts. He says most of the technology 
behind the e-commerce on MLB.com adheres 
to open standards, and is based on a J2EE- 
compliant application server. 

“Users log in to the servers. Behind that we 
have lightweight directory access protocol, and 
Oracle.” He adds, “The subscription process is 
straightforward. We track users based on 
sessions to verify whether someone is logged in. There’s some built-in 
handling for that within iPlanet, and all of our development is [in the form 
of] JSP pages ” 

For the most part, media products on the site have been implemented 
through MLBAM’s partnership with RealNetworks, and the help of the Real 
Broadcast Network. However, due to the video source (Virage), the need 
for timely de ivery to the Web, and the need for stats synchronization, 
Custom Cuts was implemented from a significantly more complex model. 

MLBAM had four and sometimes five developers working non-stop on 
Custom Cuts for almost three months. Additional staff members helped 
with the architecture and infrastructure planning. Organizing the logistics 
for video acquisition, which takes place via satellite, took several months 
as well. All told, from the initial architectural discussions to the launch on 
MLB.com, Custom Cuts was in development for about six months. 

Choti’s don’t-reinvent-the-wheel approach to development came into 
play when the staff decided to drive Custom Cuts off the data architec¬ 
ture of MLB.com’s audio product, Gameday. Gameday streams live audio 
broadcasts of all games throughout the season. The Gameday produc¬ 
tion process connects the stringers—laptop-equipped employees at the 
games who enter into a custom application information about each play 
as it occurs—with MLB.com’s stats database. 

Beyond this data architecture, however, Custom Cuts proved to be a 
completely different animal from Gameday. CustomCuts significantly 
changed the way that MLB.com interprets live event data from the ball¬ 
parks. Other professional sports, such as hockey, basketball, and foot¬ 
ball, have a clock running throughout the game. This creates a 
somewhat official time against which events can be synchronized. In 
the case of baseball, there’s no clock running, which makes the task of 
producing automated video with synchronized pitches much more 
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No amount of synchronization and 

metadata can save a business, though, if 
performance issues make the site appear 
broken to customers. To mitigate those familiar 
server load issues caused by streaming video 
on the Internet, MLBAM relies on a content 
distribution model called edge caching. 


complex. MLBAM made significant changes to 
the data model for the incoming stringer data 
to account for time stamps. 

MLBAM knew also that it had to obtain the 
realtime information to work with Virage. The 
Virage indexing process is a multipass system 
that uses MLB.com’s live event data feed, 

Virage’s proprietary video scrubbing technol¬ 
ogy, and final scrubbing and sign-off by video 
editors. On the front end, MLBAM’s custom- 
built technology handles the user experience 
from subscription, through the search, to the 
construction of the Custom Cuts reel, to 
the viewing of the user’s video selection. 

The usual Real Broadcast Network model uses static SMIL docu¬ 
ments to synchronize sound, video, and other data. But in the case of 
Custom Cuts, the team needed mechanisms to distribute real time 
event data to Virage—a complicated proposition. The team built a 
Web-based XML interface on the Virage side to retrieve the clip meta¬ 
data, and relied on dynamic SOL generation on the MLB.com side to 
accommodate the multitude of search possibilities. Finally, team 
members generated dynamic SMIL documents based on users’ Custom 
Cuts reel selections. 

Infrastructure 

No amount of synchronization and metadata can save a business, 
though, if performance issues make the site appear broken to 
customers. To mitigate those familiar server load issues caused by 
streaming video on the Internet, MLBAM relies on a content distribution 
model called edge caching. 

In this context, edge caching is the use of strategically located 
servers to distribute the load of streaming video across the Internet. 
This relieves the pressure on individual network segments and stream¬ 
ing servers. In the traditional server-side delivery model, when the user 
requests objects, Web and application servers process the request, and 
the objects are sent from the server back to the end user’s browser or 
client application. 

The traditional server-side delivery model places a higher load on the 
servers, which typically results in a slower response to requests. With 
edge caching, objects are put on geographically dispersed servers 
throughout the Internet and placed as close to the end user as 
possible. This method puts less stress on the hosted servers, reduces 
the need for larger pipes, and typically delivers the video much quicker 
than sending it across many Internet nodes. As fans request digital 
streams, the closest or fastest responding server (in this case, Akamai 
servers) responds to the request in a load balanced fashion. For Custom 
Cuts, MLB.com utilizes the Akamai FreeFlow product, which is designed 
to distribute streaming media reliably and quickly to a large number of 
users, in as many locations. 

A Grand Slam? 

MLB.com’s relaunch looks to be paying off. Non-subscriber traffic 
volume to the site has climbed. And according to Nielsen/NetRatings, 
more than 21 million office workers viewed streaming media on the 
Internet in September 2001—up 21 percent from September 2000. 

It isn’t all high-fives for the staff, though. By mid-June, a total of 
83,000 subscribers had signed up for audio streams from MLB.com. 
While this may sound impressive, the number of viewers is not even 


the equivalent of two sold-out games in the major leagues. According 
to spokesman Jim Gallagher, MLBAM isn’t worried by these figures. 
“We’re predicting profitability in the middle of our second year,” 
he says. 

During one of the first games of the 2001 season, MLB.com stum¬ 
bled when the site went down due to high traffic volume. Rather 
inauspiciously, it was just one week after MLB.com began charging for 
audio content. Getting hit with the worst-case scenario right off the 
bat may have been a boon, though. The response to the problem— 
the edge caching delivery model—could turn out to be a magic bullet 
that makes streaming media more viable in terms of image and 
performance quality. 

Today, MLBAM’s team looks back on the Custom Cuts project’s devel¬ 
opment with little regret. Given the potential grief in a project of this 
scope, Choti says the problems were minimal. Partnering with Real 
Networks and Virage avoided “a lot of pain and heartache to MLB.com 
and its fans," he says. “To develop this completely in-house would prob¬ 
ably have taken three times as long, [cost] ten times as much, and we 
would have had massive bumps along the way.” 

Naturally, in the aftermath of a launch and a long season, developers 
have compiled a list of ideas about how to improve Custom Cuts, particu¬ 
larly with regard to the assets. For example, Major League Baseball 
is somewhat unique in its scalability requirements, says Shaffer. For this 
reason Shaffer believes MLBAM would definitely benefit from centralizing 
the data store for all video-related metadata. Baseball also has the unique 
requirement of moment-by-moment fluidity. “Due to the nature of base¬ 
ball statistics, past rulings and decisions are constantly being changed, 
which currently forces both Virage data and MLB.com data to change.” In 
the future, the MLBAM team plans to ensure that Custom Cuts is seam¬ 
lessly updatable in real time. 

MLBAM would be wrong to assume its problems are all in the past. 
But it does seem to have the most debilitating bugs worked out for 
the second revision of Custom Cuts, which is slated for next season. 
Currently, the development team is working on what Shaffer calls a 
“rock-solid” architecture that will support Custom Cuts for the 
coming years. 

“We are definitely anticipating changes in streaming media and Web 
development technologies, but have the benefit of a mostly unchanging 
platform to base our products on,” says Shaffer. Add to that the benefit 
of the fans, unchanging in their loyalty, and MLBAM is set to be the 
most complete baseball portal around. >< 

Jennie Rose is a freelance technology writer and former Web developer. She 
welcomes your feedback at )enneric(a)pacbell.net. 
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PROGRAMMING 
WITH PERL 



Randal has been with us since our first issue, and this month he bids 
farewell to Web Techniques. 



Randal L. 
Schwartz 


Having been in these pages since the beginning, it’s now 

the beginning of the end. Next month, the magazine will 
change to a new format, and after 70 installments, this is 
the last column I’ll be writing for Web Techniques. Rather 
than following my regular format this month, the editors 
and I thought it would be appropriate to give all of you 
loyal fans a peek at the inner workings of our six-year 
relationship. 

How It All Started 

In the latter part of 1995, Ray Valdes approached me. At the 
time, he was senior technical editor at Dr. Dobb’s Journal. He 
had read the bi-monthly columns that I was writing for Unix 
Review, and asked whether I'd like to do a monthly Perl 
column for a new (and as-yet to be named) Web technology 
magazine that was being spun off from Dr. Dobb’s. I recall 
telling him that I’d never been a “Webmaster” anywhere, 
except on my own smallish site at stonehenge.com. But I did 
know Perl, so as long as I could stay inside the areas with 
which I was familiar (or perhaps press outside them just a bit), 
I could probably write a few columns and see how it went. 

Seventy columns later, I’m still on the payroll. 

I’d like to thank the people who have edited my columns 
or worked with me to start the process, including (in 
approximate chronological order): Ray Valdes (whom I just 
mentioned), Jon Erickson, Mike Floyd, Bob Kaehms, Tami 
Zemel, Keri Hayes. Dale Dougherty, Elisa Welch, Rusa Vuong, 
Alan Zeichick (for one column while Bob was out on pater¬ 
nity leave), Amit Asaravala, Maggie Berry, Allison Post, and 
finally Neil McAllister. My apologies if I left anyone out. 

The Topics 

My first column, in January 1996, was on using the CPAN. 
Since then, I’ve covered a huge variety of topics. I tried to 
evenly distribute the columns between server-side (CGI, 
mod_perl), client-side (LWP), and systems administration/ 
maintenance (HTML parsing, logging). 

I’ve written more than 7000 lines of code, using dozens of 
different modules from the CPAN. I’ve rewritten my link- 
checker four different ways. I’ve talked about image 
manipulation, guest books, chat areas, mini Web servers, 
session management, hit counters, authentication, authori¬ 
zation, and accounting. I’ve used Chatbot::Eliza to generate 
odd content. I’ve dealt with cookies, both on the server side 
and the client side. I’ve written about uploading files, deal¬ 
ing with MIME, using DBI with MySQL, and wrangling XML 
and NNTP. I’ve shown you how to deal with people who click 
“submit” too quickly, and how to make multipage forms 
work well, including validating the fields. I’ve created robots 
that stuff forms, and forms that couldn’t be robot-stuffed. 


I’ve enjoyed the variety of topics that I’ve been able to 
visit. Had you asked me at the beginning whether I could 
have done all of this, I would have flatly denied it. But I only 
had to watch the new modules being uploaded to the CPAN, 
and monitor what people were asking about on the news- 
groups and mailing lists, to spark my ideas. In fact, I still 
have 271 ideas saved up to investigate. 

My column is written using POD (Perl Online 
Documentation) with GNU Emacs, but the first few months 
were written in just plain text. I switched to POD because it 
marks up the text unambiguously, while also making it easy 
for me to HTML-ize the columns for my own online archive at 
www.stonehenge.com/merlyn/WebTechniques/. (You can also 
access my past columns online at www.webtechniques.com.) 
Over the years, I’ve received quite a few requests to turn 
these columns into a book, or at least a CD-ROM, but it’s up 
to CMP Media to tackle that job. 

My interaction with the magazine has been interesting 
over the years. I wish I had room to publish some of the 
conversations I’ve had with the editors in the course of 
developing my columns. In August 2000, we joked about the 
upcoming Collaboration issue. One of the topics proposed 
was a chat server. Another columnist challenged me to write 
it in less than 100 lines of Perl. That much I did for the 
magazine, but the rest of the conversation was priceless. 

The Feedback 

Perhaps the best part of this job was the hundreds of letters 
I’ve received, including suggestions for my errata list, ideas 
for new topics, and notes from people saying my work 
made a difference for them. Here are some excerpts to give 
you a flavor. As I didn’t have time to obtain permission for 
each one, I stripped off the names. 

From one reader, I got the following, “I appreciate your 
column in Web Techniques ; the flavor reminds me of that 
which I’ve come to appreciate in some of the better articles 
in Dr. Dobb’s. It isn’t a tutorial for rank beginners; it’s a 
guiding hand to a professional who knows programming 
thoroughly, but doesn’t yet know all about Perl and Web 
programming.” 

In July 1997, “The amount of fun I have on the Net 
everyday, especially with the Perl scripts I’ve installed and 
tinkered with on my fledgling hobby/sorta commercial site, 
is due in no small part to the work you’ve done with the 
two Perl books and your columns in Web Techniques.’’ 

In September 1998, “Thanks for the great books and 
columns. I learn something new with each issue of Web 
Techniques. I like the way you introduce new segments 
of modules I haven’t used before. Forces me to go look 
at them!” 
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And, in December 1999, “First, thank you for 
all your help in educating me with both your 
book work and your Web Techniques columns, 
and a particular thanks for doing it with a 
touch of humor. I do believe I can pick out the 
parts of ‘Programming Perl’ that you contrib¬ 
uted to as I read along.” 

From September 2000, “Just want to say a big 
thank you! Your August column in Web Techniques 
allowed me to transfer 60MB of data between 
two ISPs without losing modification times on 
most of the uploaded files (this was a requisite 
feature). I had no telnet access on the former ISP 
account and was wondering how I could mirror 
the contents without using a CPAN package. 

Your script arrived just at the right moment to 
help me write a quick hack. I wasn’t aware you 
could do such things in Perl! 


From the author of CraphViz (Stephen C. 
North) on my January 2001 column referencing 
GraphViz, “Thank you for the good ink!” 

You’re welcome, Stephen. 

In September 2001, “For starters, I would like 
to say I am very grateful for all your contribu¬ 
tions to the Perl community. I attribute a great 
deal of my Perl knowledge and enthusiasm to 
you. Thanks.” 

And thank you, to all the readers who have 
taken the time to write. You can continue to 
reach me at merlyn®stonehenge.com, as usual. 

In closing, no listings this time. Just: So 
long, and thanks for all the fish. >< 

Randal (merlyn(a)stonehenge.com) has coauthored 
the must-have standards Programming Perl, 
Learning Perl, and Effective Perl Programming. 


editor’s note 


Along with Lincoln Stein, Randal Schwartz has 
been our longest running regular columnist. He 
was here for our premier issue in April 1996, 
and he rounds out his run with this, our final 
issue as Web Techniques. During that period, he 
has contributed to the magazine numerous fun 
and thought-provoking articles on Perl. 

Way back in 1996, Randal lamented the lack of 
truly standards-compliant Web browsers. 
Inconsistencies between platforms meant 
pages rendered differently depending on what 
software people used-a problem that persists 
today, even more so with the advent of 
Internet-enabled handhelds, set-top boxes, and 
mobile devices. In “Browser-Dependent HTML” 
(www.webtechniques.com/archives/1996/ll/perl/) 
, Randal presented a script that would deter¬ 
mine which browser was on the receiving end 
and reformat static HTML pages accordingly. 

It’s a trick that a lot of companies are still 
trying to perfect for their content-delivery 
platforms, and Randal pulled it off with a tiny 
Perl script. 

Another example is the anonymizing proxy 
script that Randal served up the following year 
(www.webtechniques.com/archives/1997/07/perl/). 
With the recent demise of consumer privacy 
services like those once operated by SafeWeb 
and ZKS/Freedom, we think it’s doubly great 
that Randal has used this forum and his dis¬ 
tinctive, compact, and efficient programming 
style to present our readers with the know-how 
to build their own equivalent software. 

Perl isn’t just about serving HTTP requests, 
either. In 1998, Randal showed us how to gener¬ 
ate thumbnails from a directory full of images 
(www.webtechniques.com/archives/1998/09/perl/), 
and how to archive portions of Web sites with 
the links automatically “cleaned” for installation 
on another server (www.webtechniques.com/ 
archives/1998/02/perl/). Simple, yet efficient 


tools like these have been the hallmark of 
“Programming With Perl” throughout its run in 
Web Techniques. 

Building on his thumbnail idea, in 1999 Randal 
presented a complete CGI photo album 
application (www.webtechniques.com/archives/ 
1999/01/perl/). He also took some time out for 
fun-another characteristic of his columns- 
with a Perl-based Y2K countdown clock 
(www.webtechniques.com/archives/1999/07/perl/). 
The world may not have ended, but at least 
you knew when you were in the clear. 

The good ideas continued, with topics that 
ranged from compressing files on the fly 
(www.webtechniques.com/archives/2000/08/perl/) 
and processing XML (www.webtechniques.com/ 
archives/2000/07/) in 2000, to managing cookies 
(www. webtechniques.com/archives/2001/05/perl/) 
and visualizing traffic flow (www.webtech- 
niques.eom/archives/2001/02/) in 2001. 

These are just some of the highlights. Over 
the course of his 70 “Programming With Perl” 
columns, Randal has consistently delivered rel¬ 
evant, useful, effective, and remarkably easy 
tutorials on Perl for Web development. In turn, 
Web Techniques is proud to have been able to 
offer a forum for one of the great ambassa¬ 
dors of this elegant and simple language over 
the years. Thanks for all of your efforts, 
Randal. 

Although this is Randal’s last column for the 
magazine, we trust that you, our loyal read¬ 
ers, will be back again next month, when Web 
Techniques returns as New Architect. A new 
face, a new name, but the standards remain 
the same, as does our goal: to bring you the 
best quality Internet technology content each 
month. Until next time, enjoy! 

-Neil McAllister 
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Internet technologies have evolved, 
and so has Web Techniques magazine. 
With the March 2002 issue, Web 
Techniques becomes New Architect, 
dedicated to educating and inspiring 
you, the innovators building and shaping 
future technology strategies. 

New Architect provides the in-depth 
technical information you need to build your 
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organization’s e-business foundations. 
The magazine features detailed analysis 
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industry insiders who know the real story. 

This is why Internet leaders have 
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since 1996, and will continue to do so for 
years to come. 


Internet Strategies for Technology Leaders 

newarchitectmag.com 


•• •* 

• • •• 
•• •• 

CMP 


United Business Media 







Macromedia Director sprang from the CD-ROM industry of the early 

1990s, quickly earning its reputation as the premier authoring package 
for interactive multimedia content. In 1995, the introduction of Shock- 
wave technology added a whole new twist. With Shockwave, Director 
programmers could embed code initially intended for CD-ROMs directly 
into Web pages for delivery over the Internet. Before long, a cottage 
industry of Shockwave developers was producing original, fully interac¬ 
tive content for this new medium. 

These days, Macromedia’s other multimedia product for the Web, 
Flash, has stolen much of Shockwave for Director’s thunder. With its 
more compact content, simple user interface, and a plug-in that comes 
as a standard install with most browsers, Web developers without a CD- 
ROM background have found Flash much more accessible than its more 
sophisticated, older cousin. 

Shockwave for Director still offers exciting capabilities that Flash 
can’t match, however-especially in the most recent version, 8.5-thanks 
to Macromedia’s recent technology partnership with Intel. Although it’s 
just a humble, half-point version increase from Macromedia’s previous 
release, Director 8.5 now incorporates hardware-accelerated, real-time, 
interactive 3D graphics—not 2D images shaded to look like 3D, but 
mathematical 3D objects rendered on the fly. 


Applications for 3D 

Many people have the same reaction the first time they see real-time, 
interactive 3D playing in a browser window. First their eyes get big. Then 
you see them peering around the side of the monitor, trying to find the 
hidden mirrors. But setting the wow factor aside, browser-based 3D has 
a lot of practical applications. 

Communication problems in almost any industry are often overcome 
by converting words into pictures. Interactive 3D technology takes this 
one step further. It lets your target audience not only see what you’re 
developing, but also interact with it. Audience members can spin it 
around to view it at all angles. They can press any of the buttons or 
handles, open any doors, and flip switches. 

Used as a pre-prototype production step, this technology can facilitate 
significant savings. Car manufacturers might use it to see seamless com- 
posits of new vehicles, both inside and out. Military or educational serv¬ 
ices could create training simulations. Medical courses could use 
Shockwave to take viewers on interactive tours of DNA chains, and interior 
designers could use it to model rooms in real time. 

The Director Environment 

To create interactive 3D experiences from scratch in C++ or Java, you would 
first need to spend literally years developing 3D and physics 
engines. This would also assume that you’ve assembled a 
team with a strong understanding of math and computer 
science. By comparison, with Shockwave, the developers at 
Macromedia have already done most of the hard work for you. 

Director’s tools aren’t perfect. For the amount of power 
that you now have with Director, its debugging facilities lag 
behind what you would find in a development environment 
for a language like C++. For example, in C++you can inspect 
all the property of a given object in memory, while in 
Director this is only possible with third party add-ons. 
However, the sophisticated Director 8.5 authoring environ¬ 
ment lets you produce real-time 3D content that rivals what 
you’d expect to see from a professional CD-ROM game, in 
dramatically less time. 


online 

resources 


directing 3D 


The learning curve for 

Macromedia Director Homepage 

3D animation can be 

www.macromedia.com/software/director/ 

steep. But if you want 
to experiment with 

Support Pages for Shockwave for Director 

browser-based, 

www.macromedia.com/support/director/ts/documents/tn 

interactive 3D using 

3104-dirWebsites.html 

Shockwave, these sites 

Demonstration Hardware-Accelerated 3D Game, with Lingo 

can help get you over 

Source 

the hump. 

stuntracer.sourceforge.net/stuntracer.htm 


The Havok Physics Engine Homepage 


www.havok.com/xtra/ 

L. 
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INTERACTIVE 3D WITH SHOCKWAVE 





As an authoring tool, Director doesn’t create any assets on its own. 
You must use other applications to create sound files, and 2D and 3D art 
are created in other applications. Currently, Macromedia lists Alias 
Wavefront Maya, Caligari, Discreet 3DS Max, NewTek Lightwave 
3D, Softimage XSI, and AMAPI 3D as applications that can produce 3D 
models for Shockwave. 

Keep in mind, however, that only a subset of the features of these 
3D modeling applications will transfer to Shockwave. For example, it 
doesn’t support morphing and animated scaling. Also, if you aren’t 
already familiar with a high-end, 3D modeling application, it won’t be 
easy to get up to speed. Although a novice can make simple forms in a 
3D application, it really takes someone with experience to create 
sophisticated models. Fortunately, many companies already have 
existing 3D assets. 

In addition, while Director’s high-level tools make for smaller 
teams than C++ code requires, you may still need more hands 
than you usually do for Web projects. For example, chances are 
you won’t find anyone who’s both a 3D modeling expert and a 
Director expert. 

3D Lingo 

The mathematics required to orient and manipulate objects in 3D space 
can be quite complicated. Some concepts and mathematical functions 
are unique to 3D. For example, there are several ways to specify an 
object’s orientation in 3D space, as well as functions that describe the 
relative angle of rotation between objects. 

With Director 8.5, you also get a number of high-level functions that 
shield you from some of the hairier 3D math. For example, orienting an 
object so that it faces another object usually requires complex 3D 
manipulations. With Director’s high-level API, however, it’s easy to write 
Lingo code to perform this task (see “Multimedia Methods” for more 
information about Lingo). 



figure 1 


The Havok Xtra for Shockwave lets you model 
complex physical interactions between objects 
with relative ease. 


The physica behaviors available with Havok are the kind that you’d 
expect to see in a cutting-edge CD-ROM game. Havok provides complete 
rigid-body physics, rigid-body collision detection and resolution, stack- 
able objects, and both sliding and rolling friction (as shown in Figure 1). 
And again, Lingo’s simple syntax makes it easy to describe whatever 
properties you desire. Here’s how you might program the virtual gravity 
for your simulation: 

havok = member("physics.hke") 
havok.gravity = vector( 0, 0, -9.81 ) 


modell=member("scene").model("pointer") 
model2=member("scene").model("pointee") 
modell.pointAt(model2) 

Simulating real-world physics is one of the great challenges of digital 
3D animation. Fortunately, Director is extensible through plug-ins called 
Xtras, and Director 8.5 now includes the Havok physics Xtra at no addi¬ 
tional cost. This add-on simplifies everyday physics enough to convinc¬ 
ingly simulate motion in real time. 


Here’s an example of setting physical properties for a specific model, 
including mass and relative friction: 

model = havok.rigidBody("bowling_ball") 
model.mass = 10 
model.friction = .1 

Of course, this is another area that has its own learning curve for 
those not experienced with 3D. There’s a whole new set of terminology 


multimedia methods 


Macromedia Director lets content authors 
build interactive projects using a fully 
visual environment with drag-and-drop 
tools. It’s tempting to regard Director 
merely as advanced presentation software- 
PowerPoint on steroids. But in reality, it’s 
much more than that. 

Director sets up a visual environment that 
mimics the filmmaking process. But when 
the visual metaphor isn’t sufficient, 
Director also offers a complete program¬ 
ming environment of its own, built around 
a language called Lingo. Lingo isn’t just a 


simple application scripting language. It 
lets coders mix traditional procedural pro¬ 
gramming with advanced object-oriented 
techniques. Lingo was originally designed 
with a high-level, English-like syntax that 
was often cumbersome to experienced 
developers. Beginning with the Director 7 
release, however, it has also supported the 
familiar “dot notation” of other object- 
oriented languages like Java and JavaScript. 

Nearly every one of Director’s functions can 
be manipulated using Lingo, and many of the 
most advanced Director programmers forego 


the GUI completely for their projects. 
Instead, all of the action is executed pro¬ 
grammatically, using a series of scripts 
attached to a single animation frame. 

Lingo also offers advanced functionality 
beyond the basics of multimedia production. 
In addition to libraries for manipulating 
onscreen images and 3D graphics, program¬ 
mers can also access such sophisticated 
features as floating-point math, string 
manipulation, and TCP/IP networking—all 
from within the Director environment. 

-Neil McAllister 
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associated with a physics simulation. Fortunately, Havok supplies a 
solid collection of tutorials and examples for the plug-in, and its devel¬ 
oper support is excellent. 

Further, Shockwave 3D offers several visual effects that you can apply 
to your models. In 3D parlance, these effects are known as shaders, and 
all of them render in real time. Some examples include a cartoon shader 
that lends the look of traditional animation to your project, as well as 
pen-and-ink and newsprint shaders. 

For example, Lingo rendering a model in cartoon style looks like this: 

model = member("scene”).model("funny_car") 

model.addModifer(#toon) 

All of these steps can tax your CPU, so it’s fortunate that the 
Shockwave plug-in supports hardware acceleration on some of the more 
popular video cards. Without acceleration, the quality of rendered 
textures suffers dramatically, as do the frame rates of the resulting 
animation. (On my own projects, I’ve seen frame rates triple when 
running on a machine with an accelerated card.) 

A rendering effect that’s unfortunately absent even on some acceler¬ 
ated cards is anti-aliasing. Anti-aliasing gives objects smooth-looking 
edges, and an almost photo-realistic visual effect (see Figure 2). This 
is especially critical for e-commerce applications where clients want 
their products to look as good as possible. Most likely this wasn’t 
included for performance reasons. Hopefully, Macromedia will adopt 
the compromise strategy of some competing tools (such as the Web 3D 
plug-in by Viewpoint), and add an option that lets you activate software 
anti-aliasing when an object isn’t in motion. 

Delivery Bottlenecks 

The total file size of your compiled project obviously correlates 
directly with download time for users. You may be prepared to pay a 
bit more in file size for the opportunity to deliver a fully interactive 
3D experience, but remarkably, you don’t have to. Because 2D images 
(textures) are loaded once for each object, and then rendered on the 
fly for different angles, even complex 3D scenes can actually be quite 
small. If your project is still too large, you can also reduce the quality 
of your models or textures as you export them from your 3D model¬ 
ing package. 

While you can make a nice interactive experience for less than 500KB, 
the wide range of functionality that Shockwave supports brings the 
plug-in size to over a megabyte. Time-consuming downloads have 
historically discouraged end users from installing browser plug-ins, so 
this is where broadband comes into play. With a high-speed connection, 
users can download and install Shockwave in just a few seconds, com¬ 
pared to the minutes it would take over a modem line. Upgrading the 
plug-in is easy, as the latest version includes an auto-update feature 
that significantly shortens future downloads. 

Even so, the Shockwave for Director plug-in isn’t a transparent down¬ 
load like its cousin Flash. It presents the user with a dialog box to install 
and register the plug-in, as opposed to just quietly auto-installing, then 
playing the content. This, in my opinion, is the single largest barrier to 
the widespread adoption of Shockwave. On a broadband connection, 
the time it takes the user to decide whether to install the plug-in and 
then fill out a brief registration form will likely be greater than the time 
it takes to download the plug-in itself. 

Fortunately, thanks to Macromedia’s marketing efforts, both the 
Flash and Shockwave plug-ins now come pre-installed on new Windows 



figure 2 


Shockwave doesn’t support anti-aliasing on all 
video cards, meaning models can appear blocky, 
as on the left. 


and Mac OS machines. In the past, this was only true of Flash. Still, 

Flash remains the more popular choice, and is virtually ubiquitous; its 
plug-in comes bundled with Real, Prodigy, AOL, Excite@)Home, and 
other services. By comparison, many users will still need to download 
the Shockwave for Director plug-in themselves. 

A New Dimension 

Macromedia, Intel, and Havok have come together to bring an 
enormously powerful 3D development tool within reach of the 
average developer. Sophisticated 3D models can be imported into 
Director and then scripted with complex interactivity and realistic 
physical behaviors. The combination of mature, high-level tools, fast 
CPUs, and broadband Internet connections has made rapid develop¬ 
ment and deployment of interactive 3D possible. And best of all, 
there’s no licensing fee for developing Shockwave applications. 

Even with all of the groundwork that’s laid for you, however, 
creating complex interactive 3D experiences isn’t for the faint of 
heart. While you can get up and running quite quickly, refining your 
first attempts into polished products will take some time. For exam¬ 
ple, you can quickly create a spherical object that can be manipulated 
with the mouse, but creating a volleyball game is a much more 
daunting task. 

Luckily, you’re not on your own. As a mature product, Director has 
a large and thriving development community. This includes active 
newsgroups and mailing lists, many of which are frequented by 
Shockwave 3D’s creators. 

Convincing your clients that interactive 3D is valuable may be an 
even bigger challenge than mastering the software. The technology is 
still fairly unfamiliar, and many companies have adopted a back-to- 
basics Web strategy while the tech economy recovers. 

Don’t get me wrong. This is an incredible package and I highly 
recommend it. Don’t let the pitfalls of Shockwave 3D development 
discourage you. Knowing potential drawbacks should make you 
more confident and prevent you from encountering any surprises, 
ensuring that your development experience is as smooth as possible. 
Once you start developing 3D content with Director 8.5, you’ll be 
hooked. Send some flowers to your significant other and hire someone 
to walk your dog! >< 


Creg lives in San Francisco where he heads up ForgeFX, a leader in 
Shockwave 3D content development. Current projects include a Shockwave 
3D mountain biking game. You can email him at gmeyers(a)forgefx.com. 
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WebSphere 
Studio 4.0 

IBM Corporation 
www.ibm.com 

$599 for Pro Edition 
$1999 for Advanced Edition 


Faster Web Application And 
Dynamic Site Development 

IBM WebSphere Studio 4.0 is the latest 

iteration of IBM’s premier Web application 
development suite. It’s designed to mesh with 
other members of the IBM WebSphere family 
such as WebSphere Application Server. Studio is 
a multiplatform, standards-based tool that can 
produce HTML, GIFs, JavaScript, JSP, and CGI 
applications to run in any environment. 

Studio is available in two editions: Pro and 
Advanced. The Advanced edition adds personal¬ 
ization tools, supply chain management APIs, 
and remote debugging functionality. I reviewed 
the Advanced version on a clean install of 
Windows 2000 Server. Much more than a 
simple HTML editor, Studio includes an Applet 
Designer, a Page Detailer (available only with 
the Advanced edition), and also a Distributed 
Debugger. Although the visual HTML designer 
is the focus of this review, I also looked at 
some of the newer and more advanced wizards, 
which are designed to whip up complex code 
for JavaBeans and Web services. For related 
information on IBM’s WebSphere family of 
tools, see the sidebar. 

Start Up 

Although WebSphere Application Server isn’t 
actually part of the review, installing it is a 
practical necessity and is advisable for testing 


purposes. You need a Web server to develop 
interactive pages. My installation of this server 
was both frustrating and amusing. The setup 
gave me the option to install not one, but two 
Web servers. I shouldn’t have been greedy 
because the installation insisted on the loca¬ 
tion of an Apache configuration file that I 
couldn’t find. On quitting the failed installa¬ 
tion, I resolved to check out the readme.html 
file on the WebSphere CD before starting again. 

The readme rightly states that, “it is likely you 
will need an installation guide prior to installing 
the product.” This means you’ll probably have to 
visit IBM’s Web site Library. When I finally found 
the Application Server SE (Standard Edition) 
Install on the Product page, I laughed out loud 
at Step 3: “Follow the installation instructions 
appropriate for your machine’s operating sys¬ 
tem, given your choice of Web server and data¬ 
base.” Back to where I started, I ran setup again 
and succeeded by accepting only the minimum 
default options. 

The installation of Studio, on the other 
hand, was simple. Once installed, the program 
offers you a choice of customizable starter 
templates. You can also import existing proj¬ 
ects or Web sites to start up your develop¬ 
ment. The Page Designer is quite easy to learn 
and remarkably versatile. For example, when 
you add an item to your project, a dialog box 
displays a wide selection of starter files rang¬ 
ing from ordinary HTML pages to Flash movies 
and RealAudio files. Although WebSphere 
includes designers for most of the types, be 
aware that you’ll need copies of programs like 
Fireworks and Directory on your machne to 
actually work in those proprietary formats. 
Interestingly, the Studio 4.0 box includes trial 
versions of Macromedia Web development 


products, including the excellent competitor, 
Dreamweaver 4. 

It takes a while to become comfortable with 
any editor and make it work your way. I can’t 
imagine aligning and formatting text, for 
instance, by reaching for menu items. Once I 
displayed the formatting toolbar and positioned 
it near my work, I could create pages just fine 
with this tool. As you can see in Figure 1, Page 
Designer is well-organized, with features like a 
Content Manager pane from which you can drag 
images or snippets and drop them into your 
page. The source code view includes developer- 
friendly syntax coloring. However, there’s no 
sign of a line numbers option—something that 
many developers consider a necessity. (A line 
numbers option is available for a sister product, 
WebSphere Site Developer.) 

Valuable Tools 

The syntax checker is a useful feature. It parses 
HTML pages when you open them and reports 
items that are missing, such as a <BODY> tag. 
The Accessibility check ensures that your pages 
are useful to visually impaired users. For exam¬ 
ple, it catches image tags that don’t have an 
ALT attribute. The ALT attribute provides a text 
description of the graphic and object tags that 
can be voiced by screen readers. 

Another valuable tool is the Page Detailer. 
Many of us who develop pages on intranets 
and over high-speed connections forget about 
those who are still surfing the Web via slow 
dial-up. You only have to start Page Detailer 
and then navigate to any Web page using 
Internet Explorer. The utility monitors the 
traffic and produces an interesting chart that 
tells you how long each element took to 
receive. I discovered that on one of my pages, 


the websphere studio family of tools 


WebSphere Studio is a collection of IBM’s premiere application and Web 
site development tools. The 4.0 versions of WebSphere Studio tools are 
the first commercial tools based on an open source technology called 
Eclipse (eclipse.org). Eclipse is a platform for building IDEs that hopes to 
create a unified look and feel for products across various vendor offer¬ 
ings. IBM has pledged contributions of nearly $40 million in research and 
software for the project. According to IBM, future iterations of WebSphere 
Studio 4.0 products will be based on this platform. (WebSphere Studio 
Professional Edition 4.0 and Advanced Edition 4.0, which have been avail¬ 
able since Summer 2001, are not.) 

WebSphere Studio is a family of products. Its base is the WebSphere 
Studio Workbench. WebSphere Studio ships with components such as a 
mini-version of WebSphere Application Server, but with different licens¬ 
ing terms: most products require purchasing for deployment. 


Other tools in the WebSphere Studio family include: Site Developer, 
which lets you publish to and browse UDDI repositories, and Application 
Developer, wlrch integrates Java and Web development tools in a single, 
integrated, development environment for JSP, XML, and Web services 
authoring. It also has support for performance profiling, data mapping, 
and EJB development with VisualAge for Java 4; Enterprise Developer, 
with visual modeling and Java/Web adapter authoring support; and 
Homepage Builder, an easy-to-use set of tools for developing sites with 
rich media content. A Linux port of Application Developer is also in the 
works. At www.ibm.com/software, you can see previews and access trial 
versions of all the tools mentioned above. 

-Mana Tominaga 
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The Page Designer application keeps resources and formatting toolbars within 


| Q LI 6 1 easy reach. Studio also includes a syntax checker, resource manager, and wiz- 

mJ ards for advanced tasks. 


a bottleneck was caused by fetching the 
banner ad, not my content. 

Although WebSphere Studio 4.0 advertises 
Wireless Markup Language (WML) support, the 
amount of support is minimal. Certainly, when 
you add a WML file to a project, the template 
adds the starter WML tags and document-type 
description reference. However, when I double¬ 
clicked on a WML file, Studio didn’t provide a 
rich visual editor designed for WML decks as I 
had hoped. Instead, I got to work in Notepad, 
which was configured as the default editor for 
WML files. That was both a surprise and a 
disappointment. 

If you want animated Java applets for your 
site, on the other hand, you’re in luck. The pack¬ 
age includes the Applet Designer tool that lets 
you take portions of graphics and build them 
into an animated scene without doing any 
programming. Make sure you follow the “Getting 
Started with Applet Designer” tutorial first. It 
walks you through the creation of an animated 
advertising banner. Once you know the steps, it 
isn’t hard, but without instruction, you may 
fumble around for a while. 

Authoring Web Services 

I was drawn to the Web Service Creation 
Wizard, a new feature in the Studio 4.0 release. 
The wizard was fine, but it didn’t go very far 
toward creating a Web service. Perhaps I was 


expecting too much, but I had envisioned a 
tool that would take an object like a Java com¬ 
ponent and insert it into a Web site where it 
could be called and used as a service. Instead, 
the wizard takes you through the methods the 
component exposes and writes a corresponding 
Web Services Description Language (WSDL) file. 
Although it generates XML files, a lot of impor¬ 
tant detail is left inside the XML files that still 
must be edited manually. My impression is that 
the wizard will leave the average person hang¬ 
ing. Unless you’re a knowledgeable and deter¬ 
mined Web services developer who knows what 
it means to bundle a WAR into an EAR, you 
probably won’t want to use Studio 4.0 to create 
services for your site. 

There’s also a companion tool called the Web 
Service Consumption Wizard. This tool lets you 
add someone else’s Web service to your Web page. 
Strangely, this wizard asks you to navigate to the 
source WSDL file on your file system, rather than 
on the Web. The wizard should be launching a Web 
browser to go to the location of a WSDL file 
instead. Despite this, I used the browser to manu¬ 
ally capture a WSDL file from a simple Web serv¬ 
ice that I had created and knew worked. I saved the 
WSDL file (after checking that it was well-formed 
XML) to the file system, pointed the wizard to it, 
and the wizard choked. The error message read: “A 
problem occurred during Java proxy generation. 
Checkyour WSDLfile and seethe Java log for more 


details.” The Help file was useless and I have no 
idea where the Java log is supposed to be. This 
should not be that difficult. Overall, the Web 
Service components were disappointing. 

Database Connectivity 

To add database commands, you again use a 
wizard: the SQL Wizard. As long as you can 
obtain a JDBC driver for SQL Server, the WSS SQL 
Wizard will be able to use the database as a back¬ 
end datastore for your Web apps. The wizard is 
designed to help you generate record sets, 
queries, and other commands like database 
updates. But the wizard has what appears to be 
an anti-Microsoft bias. There are options for DB2, 
Oracle, and Sybase, but SQL Server isn’t men¬ 
tioned and thus falls under the JDBC-ODBC 
bridge category. After creating a system data 
source name to a SQL Server database, I was able 
to connect the wizard to the database. However, 
it wouldn’t list any tables. No error message 
displayed to indicate that I had the wrong driver 
or where I could find one that would work. 

Try it First 

WebSphere Studio 4.0 was created to let non¬ 
programmers build advanced Web applications 
and services. The various wizards start you 
toward that goal, but will disappoint ordinary 
Web developers. That said, Page Designer is a 
good tool for Web page development and team 
collaboration. The package ships with attrac¬ 
tive tools like Page Detailer and has adequate 
online documentation. If you’re doing Web 
development on your own, you might be better 
off exploring Macromedia’s Dreamweaver 
UltraDev. But if your shop has already built up 
expertise and investments in IBM’s WebSphere 
structure, you’ll have a much easier time creat¬ 
ing sophisticated solutions with Studio 4.0. 

You can download the complimentary Studio 
V4.0 Entry Edition by following the link at 
www-4.ibm.com/software/webservers/studio/. 

-Ken Cox 

Ken is a technical writer, Web developer and 
Microsoft MVP in Toronto. He wrote the chapter 
on XML Web Service Development in ASP.Net in 
the New Riders book, Inside ASP.Net. 
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infrastructure 


MULTILINGUAL 

METHODS 



Lack of static IP address doesn’t have to strand your server. Redirect 
those errant connections with a few simple scripts. 





A l Williams 


Dynamic DNS Demystified 


When I first got started in this business, computing was a 

lot less accessible than it is now. I remember driving 60 
miles to reach the closest computer store. Nowadays, of 
course, you can buy computers almost anywhere. 

Networking has seen a similar transformation. There was 
a time when getting connected was an arcane art; in 1969 it 
was a big deal that a computer at the University of California, 
Los Angeles had a connection to one at SRI International in 
Menlo Park. Today, there is a high-speed fiber optic network 
running through my backyard (literally—they all but dug up 
my fence to put it in), and you can buy broadband network 
hardware at any office supply store. 

However, there’s usually a catch: Broadband providers 
frequently don’t offer static IP addresses. Some services 
(notably DSL) connect using PPP over Ethernet, which 
routinely reassigns your network address. My cable modem, 
on the other hand, uses DHCP to obtain a dynamic address. 
Some providers will offer you a static IP for an additional 
fee. In other cases, there is no way to get the provider to 
assign you a permanent address at all. 

Why should you care about having a static IP address? 
If you’re only surfing the Web, you probably shouldn’t. 
However, if you plan to use your broadband connection to 
collect remote data, accept videoconference calls, or host a 
server, then you’ll want some way for people on the 
Internet to find you. 

Redirection Made Easy 

The domain name service (DNS) was created to make it easier 
to locate machines on the network. Yet, there are a variety of 
problems with using DNS to solve the problem of dynamic IP 
addresses. First, you need to have the authority to create 


example 1 


<9£DLANGUAGE=JavaScript %> 

<HTML> 

<B0DY> 

<% 

var theCollection = new 
Enumerator(Request.ServerVariables); 

//Iterate through the collection 
and display each item, 
while (ItheCollection.atEndO) 

{ 

var x = theCollection.itemO ; 
Response.Write(x + “=” + 

Request.ServerVariables(x) + “<HR>”); 
theCollection.moveNext(); 

} 

%> 

</B0DY> 

</HTML> 


This simple ASP demonstrates just how much data is included 
with your average HTTP request. 


and modify DNS entries. Second, it takes time for DNS 
records to propagate through the system after each update. 

Several services map a third-level domain name to an IP 
address that you choose, including dynip.com, dyndns.org, 
and dns2go.com. These generally provide client software 
that automatically notifies their servers when your IP 
address changes. But if you already have at least one static 
IF somewhere on the public network, another solution is 
to create your own system. 

Using a variety of Web scripting languages, you could 
build a page that automatically learns a remote computer’s 
IF address. Armed with that information, the page could 
redirect Web visitors from your static IP address to the 
dynamic one. Updating the record of your dynamic address 
would be trivial as well. Although many IP redirection services 
use special software for that purpose, you’d just need 
to make a Web request. After all, each request your Web 
b'owser makes has your IP address bundled inside of it. 

In fact, there’s plenty of information in an HTTP request. 
If you’re using ASP, try the code in Example 1. You’ll see that 
there’s quite a bit of information recorded for each Web 
request, including the REMOTE_ADDR variable, which holds 
the remote browser’s IP address. We’ll update your address 
record with this variable. 

Making the Connection 

Of course, you don’t want every request to reset your IP 
address, just the ones from a browser running on your own 
dynamic IP. To avoid chaos, you’ll need to make a secret page, 
use password protection, or build in a magic phrase that 
prevents casual browsers from changing your IP address. 

You’ll also need someplace global to store the IP address, 
so that you can use it to handle other requests. With ASP, 
the Appli cati on object is perfect for this purpose. You 
can use this collection to store anything you like, and that 
data will apply to all sessions. Because all sessions share 
the one object, however, it’s important to lock the collection 
before changing it (see Example 2). 

Listing 1 shows one script, written in ASP, that you can use 
to handle this process. If you access the page with a special 
query string, it sets the dynamic IP address to your current 


example 2 


Application.Lock 
Application(“newip”)= 
Request(“Remote_Addr”) 
Application.Unlock 


Be sure to place a lock on the Application data before you modify it. 
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DYNAMIC DNS DEMYSTIFIED 
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<% if Request( ,, PW")= M startrek M then 
Application.Lock 

Application("newip")= Request("Remote_Addr") 
Application.Unlock 

response.write("IP=" & Application("newip")) 
else 

if Appli cati on ("newip ,, )<> ,M, then 
response.redirect "http://" & 

Application ("newip") __ & "/" 

& Request*" SCRIPT JNIAME") 

& "?" & Request("QUERY_STRING") 

else 

response.write("Dynamic content is offline!") 
end if 
end if 


if Application("newip")="" then 

response.writeC'Dynamic content online") 
else 

script=Request("QUERY_STRING") 
n=Instr(script,";") 
n=Instr(n,script,"//") 
if n<>0 then n=n+2 
n=Instr (n, scri pt, V") 
if n<>0 then 

response.redirect("http://" & Application("newip") & 
"/" & Mid(script,n+l)) 

else 

response.writeC'Internal redirect error") 
end if 
end if 

%> 


address. The simple, hard-coded password in 
this case is “startrek.” So to set the IP, you’d 
access: 

http://(your address here)/ 
dyn.asp?pw=startrek 

If the password in the query string isn’t 
correct, the script attempts to find the last 
known IP address and forwards the request to 
that address. When the variable that holds the 
last known address is empty, the script simply 
reports that the remote computer is not avail¬ 
able. The static server will assume the dynamic 
server is going offline if you pass an empty pw 
query string. 


Other Issues 

Any language that can examine the server vari¬ 
ables and store things in a globally-accessible 
location could perform the same trick. JSP 
certainly meets these criteria. It has objects 
named application and request, even 
though they aren’t exactly the same as their ASP 
equivalents. However, the objects perform the 
same tasks, just in slightly different ways. 

This isn’t the case with PHP, which has no 
persistent storage like ASP’s Appli cati on 
object. If you wanted to write the same sort of 
program in PHP, you’d have to devise your own 
replacement for the Appli cati on object. For 
example, you might store the IP address in a 
database, shared memory, or even a file. 

jfj x A problem with this 
scheme is that the Web 
clients must always go 
through the script to 
find the correct remote 
IP. You could put surro¬ 
gate pages in place, 
such that each remote 
page has a correspon¬ 
ding script on the 
static host. But this is 
far from ideal, as it 
requires you to main¬ 
tain duplicate pages. 
Another possibility 
would be to change the 
404 error page into a 
script that redirects the 
user to the dynamic 
address. This lets the 
dynamic server handle 
any pages that the 
static host declines. 

Exactly how you set 
this up depends on 
your server. Because 
I’m using ASP at the 


moment, the application is probably running on 
IIS (although a few other options are available). 
You can set a custom 404 error page using the 
Internet Service Manager (see Figure 1). If you set 
the error page to the script in Listing 2, the server 
redirects unknown pages to the remote server. 

More IP Address Tricks 

You might be tempted to use IP addresses as 
a way to uniquely identify clients. This is a 
bad idea, as clients behind a Network Address 
Translation (NAT) router will all appear to use 
the same IP address. Nevertheless, in some 
cases, it can be useful. For example, DSL 
Reports uses this method to prevent a single 
IP address from running more than a certain 
number of tests per hour. 

Another use for tracking IP addresses is 
when you only want to allow requests from 
certain IP addresses (or ranges of IP addresses). 
For example, you could easily gain more security 
in the dyn.asp script (Listing 1) by validating 
that the IP address the client submits is from 
a network you expect. 

You can easily do this by using the split 
command in VBScript. Usually you think of 
spli t as a way to break words out of a string, 
because the default separator is white space. 
However, you can tell the command to use any 
string you like to tokenize the string. The code 
in Example 3 will split an IP address into an 
array of octets, using a period as the delimiter. 

example 3 

<% 

octets = 

split(Request(“Remote.Addr”),”.”) 

%> 

<%= octets(0) %><BR> 

<%= octets(1) %><BR> 

<%= octets(2) %><BR> 


Splitting an IP address into its component octets 
makes it easy to screen out unwanted hosts. 


Server Extensions | Server Extensions 2002 

WebSite j Performance j IS API Filters | Home Directory | Documents 1 
Directory Security j HTTP Headers Custom Errors 
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figure 1 


The Internet Service Manager lets you assign a 
custom 404 error page in IIS. 
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You could easily test each octet to determine 
whether the address is in range. 

If you wish, you could change the target of the 
redirect to include a different port number. Many 
broadband providers have blocked port 80, so 
this is often useful. Even if you run your dynamic 
Web server on a non-standard port, the redi¬ 
rection takes care of that, making the anomaly 
nearly invisible to the end user or client software. 


Signing Out 


The only remaining problem is what to do 
when the remote host is offline. Ideally, you’d 
shut down the remote host in an orderly fash¬ 
ion, so it has a chance to set the static host’s 
global variable to an empty string. This causes 
the static host to report that the remote host 
is offline. 

You can’t always depend on an orderly shut¬ 
down, though. A power failure or a network 
interruption can take the remote host offline or 
change its IP address. The remote host can peri¬ 
odically set its IP using a custom program or an 
operating system facility like cron or Task 
Scheduler. But this still doesn’t help in cases 
where the remote computer is completely offline. 

Unfortunately, there isn’t an easy answer to 
this problem. The best thing you can do is 
write a small program or script on the static 
host that periodically checks to make sure the 
remote host is really where it says it is. If it 
isn’t, then the script can reset the static host’s 
global variable. 


tunneling vs. redirection 


Other Ideas 

The scripts presented here act like traffic cops. 
They handle requests by delegating to the 
remote host. This same idea can work in other 
situations as well. For example, consider a Web 
server that serves documents hosted on other 
Web servers. The users see a central server, but 
the content comes from a variety of different 
servers. 

Of course, you’d have to use some method to 
determine which requests go to which servers. 

This same strategy could also lend itself to a 
simple load-balancing scheme. Using whatever 
algorithm you like, you can direct individual 
requests to a different server (the servers will 
presumably have copies of the same pages). 

When using this method, you’d want to avoid 
storing persistent data in cookies, for example, 
because a future visit might direct the user to an 
alternate server (with different cookies). 

With broadband likely to be installed in 41 
percent of U.S. homes by 2006, many things will 
become feasible that weren’t practical in the 
past. Sure, the broadband business has had some 
setbacks, but new, capital-intensive ventures 
often make false starts. (Remember cable TV in 
the 1970s?) The real question now is what will 
you do with a network that’s everywhere? >< 

Al is the author of many popular programming 
books including Java 2 Network Protocols Black 
Book (Coriolis). You can find him on the Web at 
www.al-williams.com. 


The ASP pages presented in this article forward Web browsers to your local machine by keeping 
track of your floating IP address. The downside of this approach is that browsers must always con¬ 
nect to a Web server that has a permanent IP address before being redirected to your dynamic 
host. 

Another way to handle dynamic IPs is with tunneling, which is the practice of encapsulating pack¬ 
ets of one network protocol inside those of another. In particular, the Secure Shell (SSH) program 
has a mechanism that easily handles two types of tunneling. To use it, you must make the SSH serv¬ 
er listen on a port and forward incoming requests to your dynamic client. (SSH can also perform 
the reverse service, where packets directed to a local port are sent to a remote server somewhere 
else on the Internet.) 


There are several ways you can achieve this. The exact details will vary depending on what SSH 
software you use and how your system is configured-for example, whether you’re behind a 
firewall-or if you are allowed to open ports on the server. If you use the Unix version of SSH, 
check out the -g, -L, and -R options. As a bonus, all traffic between the two hosts is encrypted, and 
can even be compressed. 

Incidentally, while this technique is handy for tracking a dynamic IP address, it also works well 
when you need to slip past a firewall, since you can access any port on the other side of the fire¬ 
wall while the SSH port is open. 

For more information, check out the SSH FAQ at www.onsight.com/faq/ssh/ssh-faq.html, and 
www.openssh.org. There are versions of SSH available for many platforms including most Unix, Linux, 
and Windows operating systems. 
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Where computing performance is concerned, it’s easy to 

get spoiled. For personal use, I alternate between an Apple 
Dual G4 running Mac OS X 10.1, a Sun Blade running Solaris 8, 
and a Pentium 4 running Linux. I’m always looking for ways 
to tweak more speed out of my systems. I gauge overall 
speed by how long it takes to compile some of my favorite 
development packages. If I can read the compiler output 
during the build process, it’s too slow. 

But while this simple benchmark may work for desktop 
workstations, it’s the wrong way to address the performance 
of an organization’s infrastructure as a whole. In many 
cases, the computational speed of servers is only a small 
factor. Although the speed at which a server compiles appli¬ 
cations gives some indication of its processor’s integer 
performance, and thus, how quickly it will be able to run the 
applications themselves, this factor is seldom the bottle¬ 
neck in most infrastructures. Especially in the Web world, 
with the demands that broadband and streaming content 
bring to bear, some of the best performance tweaks aren’t 
server-specific. 

Unique Considerations of Broadband 

Traditionally, the Web has been a “bursty” network environ¬ 
ment. Clients issue short requests and servers return some¬ 
what longer data. Because most requests come from slow 
connections, most developers try to keep the data served as 
small and as compact as possible. Images and HTML alike are 
compressed and optimized. And because the servers usually 
enjoy faster connections than the clients, most infrastructure 
architects worry more about having sufficient processes or 
threads to handle scores of concurrent client requests, than 
they do about saturated networks. 

With the advent of broadband, this is all changing. It 
only takes a handful of broadband clients simultaneously 
using cable or DSL modems to saturate even the fastest 
connections (T3S, OC3S, and higher) of most Web hosting 
companies. If your infrastructure is managed in-house, you 
know firsthand how expensive those high-speed links are, 
and it’s quite unsettling to realize that a few broadband 
home users, paying only $25 dollars a month, could bring 
your connectivity to its knees. 

Simultaneously, the traffic flow of the data is being rede¬ 
fined. Instead of short bursts of data—the largest ones being 
a few hundred kilobytes or so-we’re now seeing sustained 
transmissions of extremely large data amounts. Whether it’s 
because of the rise of network-based software distribution, 
the proliferation of streaming media, or some other reason, 
today’s Web transactions take longer and contain more data. 

Due to these changes, an infrastructure design that was 
more than adequate a couple of years ago might need 

L 


significant alterations, as well as a realistic look at the 
aspects that can most affect performance. 

Fat Pipes vs. Quick Pipes 

The simple solution is to just throw more bandwidth at the 
problem. If 45Mbps isn’t enough, then double or triple it. 

Or, you can consider co-locating your servers at a server 
farm rather than hosting them internally. Of course, while 
acding more bandwidth can certainly help, relying on it 
exclusively is a recipe for failure. 

Once the packets leave your internal infrastructure, you 
need access to enough bandwidth to provide acceptable 
performance, but first you must create those packets and 
them get them to your main router. That’s a very different 
problem. 

In some cases, content is created dynamically. This 
means that the application servers, whether Java-based 
or not, need to be able to generate the content fast 
enough under load to avoid undo latency. As most back¬ 
end application servers are fronted by Web servers, that 
front-end Web server must be able to transmit that 
content quickly as well. In previous columns, I’ve written 
about simple things you can check and tune to optimize 
your Web server’s performance. However, the most 
important things to note are: 

• System memory. Ensure that your server has sufficient 
resources to handle the load to avoid dipping into virtual 
memory (swap disk). 

• Fast CPU with L2 and L3 cache. In many cases, your Web 
server is simply moving data around, so making that opera¬ 
tion as fast and efficient as possible is extremely impor¬ 
tant. 

• Dedicated functionality. Use your Web server for the Web, 
and don’t run any other services on it. 

• Connectivity. Avoid hardware and ISP bottlenecks. 

Of course, not all content is dynamic-particularly the 
large files or streaming content of which I spoke earlier. 
Instead, it’s stored locally, and simply read and transmit¬ 
ted to the end client. Typically, you can find this content 
in one of two places (and occasionally in both): on the 
Web server’s local disk subsystem or on a shared storage 
device that’s usually network based. 

Depending on the type of content and its average size, 
there are two important measures of any storage system. 

The first is the “seek time,” which is the time it takes for the 
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underlying disk drive hardware to move from 
one location on the disk to another. The second 
is the throughput, or how quickly the drive can 
transfer data to and from the magnetic media. 

For situations in which large files or data 
streams make up the majority of your content, 
the throughput value is more important. You 
want to be able to read the data off the disk as 
quickly as possible. On the other hand, if your 
content consists of many small files that 
might be scattered all over the media of your 
storage devices, the seek time will be much 
more important. I know of several organiza¬ 
tions that pick specific storage solutions 
based on their intended use. For example, 
Storage System A is used for all content larger 
than 512Kb, whereas Storage System B is used 
for all HTML files less than 15Kb. 

Of course, it isn’t all about how fast you can 
read data off of disks. For example, logging is 
extremely important, but you don’t want to slow 


down your entire setup because of slow logging. 
It goes without saying that you shouldn’t share 
your logging storage system with anything else. 
It should be dedicated to logs and logs alone, 
and should have good writing performance. 

Sharing a Party Line 

Another key factor is how fast all the bits and 
pieces of your infrastructure can talk to one 
another. To illustrate, a typical scenario might 
run as follows: 

• Incoming request is initially handled by a load 
balancer. 

• The load balancer passes it on to a Web server. 

• The request requires user authentication and 
authorization, so the Web server queries a 
back-end LDAP server. 

• The request is then passed to a back-end appli¬ 
cation server to handle the business logic. 

• The app server retrieves data from a back-end 
database server. 

• The Web server combines this with static 
content pulled off the specified storage 
systems, and outputs the resulting page. 

• All of this activity is logged. 

With all of this internal chit-chat going on, it 
should be obvious that significant bottlenecks 
can exist at any level. Yet, I’m always surprised 


at how rarely this possibility is ever given 
serious consideration. 

There is still an awful lot of hardware out 
there that’s running on 10Mbps network inter 
face cards (NICs). Somehow, administrators 
rationalize their reluctance to upgrade by 
telling themselves that the older cards are 
“plenty fast” for what they want to do. But 
when it comes to your servers’ internal 
network, total speed isn’t the only concern. 
Even if the throughput is fast enough, the 
latency of slower cards could still kill you. 
Upgrading to 100Mbps or even Gigabit 
Ethernet can make considerable difference. 

In many cases, you see all of those entities 
connected by a simple Ethernet hub, espe¬ 
cially when they live in the same tier. There 
are a few problems with this approach. First, 
it limits the performance of the entire 
Ethernet segment to that of the slowest 
device. Often, if you plug in a 10Mbps device, 


it will force the other devices to drop down 
to 10Mbps as well. It usually causes these 
devices to run in half duplex mode, even if 
the remaining hardware supports faster 
speeds. In addition, network collisions, which 
can occur when packets are sent at the same 
time by different devices, become a signifi¬ 
cant issue in such a shared environment, and 
can seriously degrade performance. 

Instead, installing network switches in 
favor of “dumb” hubs makes supreme sense. 
In very simplistic terms, switches place each 
connected device on its own Ethernet 
segment, so that all devices can run and 
operate at top performance and efficiency. 
This means that one device can run in 
100Mbps, full-duplex mode, for example, 
even if other devices cannot. Instead of all 
devices (Web servers, application servers, 
storage devices, and so on) listening in on a 
single party line, the switch ensures that 
packets are directed (or switched) to only 
those devices for which they’re meant. 

An added bonus is that switches allow 
dedicated communication between devices. 
For example, let’s assume we have four 
devices, two with 10Mbps interfaces (A and B), 
and two with 100Mbps interfaces (C and D). 
With each device on its own switched 
segment, A can talk directly to B at 10Mbps 


without impacting the 100Mbps communica¬ 
tion between C and D. 

Turbines to Speed 

When I need to tweak a system to squeeze as 
much performance out of it as possible, I 
envision myself traveling along the paths 
that each request or response must traverse 
on its journey. It’s at this low level that I 
sometimes discover bottlenecks or areas for 
enhancement that I wouldn’t normally see 
when looking at the problem from a more 
general, infrastructure perspective. 

We didn’t look at, for example, the 
performance of the actual TCP/IP networking 
stack running on the server itself. This 
performance can vary widely depending on 
the operating system. If you have the luxury 
of designing your server environment from 
the ground up, taking the time to investigate 
which operating system is right for your Web 
and application servers makes a lot of sense. 

Also, sometimes it’s easy to forget that 
the upstream connectivity provider you 
choose can affect your overall performance 
significantly. To improve performance, you 
can select a provider that also handles your 
major clients’ or customers’ traffic. In this 
way, you can avoid the performance hits that 
come from jumping your traffic from one 
network backbone to another. 

Ultimately, however, remember that real 
performance is measured by your users’ over¬ 
all experience, not simply in the details of 
your architecture. Your clients, your cus¬ 
tomers, and your business partners will 
decide whether your site is slow or fast, and 
that’s where the rubber truly meets the road. 

Postscript 

As you may know, this is the last issue of 
Web Techniques before it reappears next 
month as New Architect. This will also be 
the last installment of my “At Your Server” 
column for the magazine. I would like to say 
that it has been a real privilege to have been 
afforded this forum, and I hope you have 
found at least some nuggets of useful data 
in my articles. I have greatly appreciated all 
of your feedback. >< 

Jim has been active on the Net since the ’ 80s. 
Best known as one of the core developers of 
Apache, and a member of the board of the ASF, 
Jim helps out as a senior consultant for 
Covalent Technologies. You can reach him at 
jim(a)jaguNET.com. 
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Windows Media Services 
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Free 


A Roundup of Streaming Media 
Servers 

It’s easy to put media files onto any Web 

server, where users can download them via 
Web browser and play them back. The prob¬ 
lem with this approach is that the viewer has 
to wait for the entire file to transfer before 
playing the file. The solution is a streaming 
media server. A media server provides data 
feed for playback across a network at a fast 
enough pace that the feed can be played in 
real time by the client. 

The media servers reviewed here support 
several different data formats and protocols. 

The corresponding media players try the best 
method of delivery first, then fall back on 
slower methods. (For related information, see 
the “Optimizing Streams” sidebar.) 

The three most popular formats for stream¬ 
ing video are QuickTime, Real, and Windows 
Media. So this month, I’m looking at three 
streaming media servers that deliver these 
formats-Darwin Streaming Server, RealSystem 
Server Plus (Real Server), and the Windows 
Media Server. 

I tested by using several systems: Darwin 
on Linux 2.4, Real Server on Windows NT 4, 
Windows Media Server on Windows NT 4 and XP. 
The servers had 500MHz processors and 128MB 
to 512MB of RAM. All three vendors suggest 
128MB as the minimum. With memory prices as 
low as they’ve been lately, I’d suggest using at 
least 512MB. I didn’t see any problems running 
with 128MB, though. 

Apple’s Darwin actually comes in two 
flavors. The commercial version, included with 
Mac OS X Server, is called the QuickTime 


Streaming Server, and runs on Mac OS X Server 
only. The other version is known as the Darwin 
Streaming Server and is open source. According 
to Apple’s own documentation, the two are 
based on the same codebase. If you use 
Apple’s server, you will want to upgrade your 
QuickTime Player to the Pro version for $29.95 
(more on this later). 

RealNetworks currently offers three versions 
of its streaming server. I downloaded the evalu¬ 
ation version of RealSystem Server Plus, which 
will serve up to ten simultaneous streams. The 
company also licenses 100, 200, 300, and 400- 
stream versions. To do encoding, you’ll also 
want a copy of RealSystem Producer Plus at 
$199.95. A copy is included with the 100+ 
stream versions. 

The Microsoft product is called Windows 
Media Services. The server and the encoder 
program, Windows Media Encoder, are both 
available for free. 

To serve the widest possible audience, many 
sites frequently serve movies in all three 
formats. Doing this requires at least two server 
packages, even though they could be hosted 
on one computer. The Real server handles both 
Real and QuickTime movies. Handling Windows 
Media requires a Windows Media Server. 

Installing the Servers 

Apple’s commercial QuickTime Streaming 
Server sports a graphical interface for a quick 
instaII—it took me less than a minute. On the 
other hand, Darwin was the hardest of the rest 
to install. It’s a bit rough around the edges. 
Basically, you download and unpack the tar 
archive and run an installation script. The files 


optimizing streams 


UDP is better than TCP/IP 

The TCP/IP protocol provides an error-free 
data connection by resending any packets that 
become lost or mangled in transmission. The 
resends introduce delays, which can cause 
noise or skipped frames. Therefore, mecia 
players prefer the UDP protocol when it's 
available. The theory is that dropping a 
packet occasionally is better than the delay 
induced by retransmittal with TCP/IP. 

UDP is often blocked at firewalls and rcuters. 
If you have a gateway router such as a 
Linksys or Asante, check to make sure it 
allows UDP through on ports 6970-6999. If 
UDP is unavailable, the player will next try 
to use TCP/IP on the default port. 


end up scattered here and there, in /var, /usr, 
/etc, and there are no options on this. 

There are two main parts to the software. 
You start a Perl script called streaming- 
adminserver.pl, which then starts the actual 
media server, DarwinStreamingServer. If 
you’re using play lists, there is also a separate 
PlaylistBroadcaster program. 

After starting the media server, the Perl 
script continues to run as a Web server on 
port 1220. To configure and monitor the media 
server, you connect to it with a Web browser. 
The server requires authentication to connect, 
and if you have the Net::SSLeay Perl module 
installed, it will run as an SSL secure server. 
Darwin was the only server supporting SSL. 
Figure i shows the main administrator page. 

User account information is maintained in 
a file called qtpasswd in /etc/streaming. You 
can add users from a command line program 
called qtpasswd. Authentication is required 
for administrative access and optionally to 
control media access. 

The user manual for Darwin comes as a PDF 
file. In general, the manual is good, but many 
Darwin configuration features aren’t docu¬ 
mented there, nor can you set the features in 
the Web interface. In some instances you 
must use a text editor to modify the file 
/etc/streaming/streamingserver.xml. The XML 
file is well-commented once you find it. 

To get started with the Real Server, you fill 
out a form on the Web site and download the 
tar archive. The company will email you a 
license file. Installing Real Server was a little 
fuzzy. Most of the documentation is provided 
as Web pages, so you have to perform the 


Streaming On Port 80 

Firewalls often block the high port numbers. 

If the default media port is blocked, the 
player checks port 80. All of the servers 
reviewed here allow streaming on port 80, 
though it must be explicitly enabled. That’s 
because streaming on port 80 precludes the 
server from using it for normal HTTP services. 

If you run a corporate firewall and your 
users frequently use media streams, you 
might want to consider opening ports for 
UDP streaming. It should reduce the load 
on your network and will result in higher- 
quality streaming. 

-BW 
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File Edit View Go Communicator 


Help 


Bookmarks Jfc. Location: Jittp://192 168.123.1.1220/ 

Back Forward Reload Home Search Netscape 


QuickTime Streaming Server , bellman i > Running 


Print Security Shop 




STATUS ■ 

Server Snapshot 


Server Snapshot 


Status: Started Sun, 4 Nov 2001 20:47:38 
Elapsed Time: 2 hrs 29 min 33 sec 

DNS Name (default): bellman 
Current Time on Server: Sun, 4 Nov 2001 23:17:11 

Server Version: 3.0 1 [v338] 

Server API Version: 3 0 

CPU Load: 0 00% 

Current #■ of Connections: 0 
Current Throughput: 0 bps 
Total Bytes Served: 801 254 KB 
Total Connections Served: 6 


ja Li 



Current Server Settings §||g§§| 


Maximum Connections: 1000 
Maximum Throughput: 100 Mbp3 

Movie Folder Path: Ajsr/localAnovies/ 

RTSP IP Address: 192 168 123 1 
Streaming on Port 80: Disabled 


Current Log Settings 


Access Logging: Disabled 
Access Log Roll Size: 10000 K B 
Access Log Roll Interval: 7 days 

Error Logging: Enabled 
Error Log Roll Size: 250 KB 
Error Log Roll Interval: 7 days 


■ ■ '& v. ^ lH & 


figure 1 


Darwin Streaming Server’s status page gives you 
access to the media server’s vital information. 


install before you can read the manual. Two 
tips to keep the installation from failing: First, 
run the installer as root, and second, use a 
complete path to the license file. 

The installer lets you choose where to place 
the files. I put them in /usr/local/realserver. By 
trial and error I determined that to start the 
server I must create a script that does this: 

cd /usr/local/realserver; 

bin/rmserver rmserver.cfg 

For administration, the Real server also 
includes a Web server component that runs 
on a randomly chosen port. (Write down the 
URL so you won’t forget it!) Real’s online 
documentation and user interface are the best 
of the three. 

As you might guess, Windows server was 
easiest to install. It uses the standard 
Microsoft wizard. What else is there to say? 

It includes an administration client to deal 
with configuration and monitoring. 
Apparently, you can install the client by 
itself on a separate machine, but this 
feature wouldn’t work for me. Also, the 
client launches Internet Explorer, and I fail 
to see why the company doesn’t just let 
you connect via any browser as the other 
servers do. 

Both Darwin Streaming Server and Real 
Server leave it up to you to restart after a 
reboot. They don’t even provide a startup 


script. Microsoft 
correctly assumes 
that you want the 
server to run after 
reboot and installs 
the script by default. 

Preparing 
Media Files 

Each of the servers lets 
you stream a variety 
of different formats. 
For example, Darwin 
Server supports Quick¬ 
Time and AVI movies, 
about a half-dozen 
audio formats, and 
MIDI files. Real System 
Server supports Real 
and QuickTime 
movies, various sound 
files, Flash, and several 
others. The Windows 
server handles MP3S 
in addition to its 

proprietary formats. 

With Darwin, any file that’s served must 
be hinted. Hinting means loading the file 
through the current version of QuickTime Pro, 
and then writing it back out to disk. This adds 
information that the server uses to optimize 
streaming. 

To set up Real media files, you use Real 
Producer Plus to perform the encoding 
step. However, I couldn’t get a copy in 
time for this review. Real’s Web library at 
www.service.real.com has a lot of useful 
documentation on preparing content for 
streaming. 

Microsoft provides a free encoder that you 
can use for either capturing or broadcasting 
audio and video. I had poor results with it. 
There might have been a setup problem, but 
the audio tracks were noisy. For serious work 
you’d probably want something fancier, 
however it’s nice that they provide one. 

Live Streaming 

You can set up live streaming by configuring 
the encoder software to provide a feed to the 
media server. In the case of the Windows server, 
the encoder itself does the broadcasting 
and the server simply negotiates connections. 

For live QuickTime streaming, Apple recom¬ 
mends the Sorenson encoder (www.sorenson.com). 
Real uses the RealSystem Producer, and for 
Windows Media you must use the Windows 
Encoder. 


Serving Media via Web Pages 

Each server places its own restrictions on how 
to reference media streams from a Web page. 
Darwin requires tags in the Web page. This 
looks like the most flexible system, but the 
documentation is very terse. I managed to get 
some links to work in my test page only by 
finding a page on the Web and looking at the 
source to see how it was done. 

With Real Server you can create a small file 
that contains metadata with the .ram exten¬ 
sion, and then reference this from the HTML. 
Alternatively, as a shortcut, you can construct 
a URL and the media server will figure out 
what to send to the browser to initiate the 
plug in. The .ram file contents should look 
something like this: 

rtsp://real.cdsl.net:554/ 
Enough_Kick.mp3 

and the equivalent HTML would be: 

<a href="http://real.cdsl.net: 
8080/ramgen/Enough_kick.mp3"> 
Enough is enough</a> 

The Windows server works more like Real 
Server, but without the shortcut. You create a 
metadata file for each stream object with the 
extension .asx. When you’re using metadata 
files, you can also specify a list of files, and 
have several files play in succession. 

Which Server Do You Need? 

The question should really be, what files do 
you want to serve? 

You need Real System Server if you want to 
serve Real files. You need the Windows server if 
you want to serve Windows Media files. Both 
the Real and Darwin servers handle QuickTime. 

I recommend Real’s server. I found it rela¬ 
tively easy to manage, and my past 
experiences dealing with the company and 
its product have been good. I also appreciate 
the fact that the Real Player is available for 
various Unix platforms. 

For an overview of streaming technology, 
and links to more streaming products and 
projects, visit www.streamingserver.org. To find 
out more about protocols, go to www.rtsp.org. 

-Brian Wilson 

Brian is cofounder of Harbro Systems in Santa 
Rosa, CA. Harbro develops Linux-based shared 
Internet services for home and office. Write to 
him at bwilson(a)harbrosystems.com. 
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BOOKMARKS 

Eugene Eric Kim 


Enterprise Java Servlets 

By Jeff M. Cenender 

Addison Wesley, 2002, 444 pp. 

$40 

Words like enterprise and business in the 

titles of software development books always 
make me shudder. Those terms are so broad 

and ambiguous, I 
never know what to 
expect. All too often, 
I’m in for pages of 
meaningless buzz¬ 
words along with the 
occasional trivial 
code excerpt. 

Every once in a 
while, however, I’m 
pleasantly surprised. Reading Jeff M. 

Genender’s Enterprise Java Servlets was one of 
those occasions. The book covers some fairly 
common ground—scalability and security in 
Web applications, for example-but it does so 
in a unique and highly effective way. 

| 

Architecture and Reuse 

Genender focuses on designing and architec¬ 
ture for supporting enterprise requirements 
while maximizing code reuse. His approach is 
to develop a base enterprise servlet from which 
all servlets extend. All of the common features 
are implemented in the base servlet, and are 
consequently inherited by the custom servlets. 

The benefits are clear. For example, once you 
have connection pooling programmed into the 
base servlet, you don’t have to write connec¬ 
tion pooling code in any of your other servlets. 
If you fix a bug or add a feature to the code in 
the base servlet, then all of your enterprise 
servlets inherit that fix or feature. 

To seasoned programmers, this approach is 
fairly obvious. What’s unique about this book is 
that, in the course of explaining how to imple¬ 
ment various enterprise features, Genender 
continues to construct the base servlet. The end 
result is a single piece of software that readers 
can immediately use for their own projects. 

This stands in sharp contrast to most books, 
which usually discuss a laundry list of features 
and then present one or two isolated examples 
that have little or no potential for reuse. More 
importantly, this approach highlights one of 
the most compelling reasons for using Java 
servlets for Web application development. 





JSPs and Servlets 

The area I found lacking in Genender’s book 
was his discussion on the interaction between 
Java Server Pages (JSPs) and servlets. Most JSP 
developers should be familiar with the so- 
called Model 2 architecture for developing Web 
applications, which let programmers cleanly 
separate presentation and logic using both JSPs 
and servlets. 

Genender’s base enterprise servlet fits quite 
nicely into this architecture, and his second-to- 
last chapter does, in an indirect way, explain 
how it can be incorporated into such an archi¬ 
tecture. However, Genender never explicitly 
acknowledges or discusses Model 2. Instead, he 
devotes one of his earlier chapters to a custom 
template engine for generating HTML pages 
from Servlet. 

Although this approach is valid and useful, I 
dislike it. One of the advantages of using a 
JSP/Servlet architecture is to avoid the neces¬ 
sity of learning yet another template language. 
However, I don’t dispute Genender’s inc usion 
of this chapter, I simply wish he had explained 
how Model 2 accomplishes a similar goal using 
JSPs and servlets exclusively. 

Beyond the Enterprise 

Overall, Enterprise Java Servlets is a tremen¬ 
dous and practical book, but the title doesn’t 
do it justice. It’s good reading for anyone 
building Web applications—enterprise or 
not—and it’s especially valuable for software 
developers who want to see and study an 
excellent example of good architectural and 
programming practices. 

The Book of Zope: How to 
Build and Deliver Web Applications 

By Beehive 

No Starch Press, 2001, 402pp. 

$40 

Z Object Publishing Environment, or Zope, is 

one of the more interesting open source Web 
application servers. In fact, the term applica¬ 
tion server doesn’t give you the full picture. It 
was among the first systems to recognize that 
Web servers are essentially object brokers—the 
central assumption behind Web services. It’s 
also a complete content management system, 
and Zope applications can be constructed 
entirely within its browser-based interface. 


Zope has a strong, but relatively small 
community of users and advocates. Part of the 
reason for its size may be because there is a 
dearth of books on Zope. A search on Amazon 
turned up only two books that are currently 
available. One of these was The Book of Zope, 
written by employees of the Beehive consulting 
company in Germany. 

An Adequate Manual 

As with many books written by multiple 
authors, The Book of Zope is serviceable, but 
nothing special. This isn’t so surprising when 

you consider that 
this book is a trans¬ 
lation of the compa¬ 
ny’s German 
e-books, which it 
uses for its training 
courses. Therefore, 
the original audience 
for these books is 
people who have 
already bought into the company’s tech¬ 
nology. 

The majority of the book reads like a user’s 
manual. The authors step you through prod¬ 
uct installation as well as the screens and 
processes for creating objects and cobbling 
them together into applications. They do so 
clearly and concisely. 

However, the book sacrifices depth for 
simplicity, an unfortunate trade-off. For 
instance, it contains a chapter on using Zope 
with the open source MySQL relational data¬ 
base. At the beginning of the chapter, the 
authors try to explain how to choose between 
using Zope’s object database (ZODB) versus 
something like MySQL. However, the authors 
never bother to outline what ZODB is and 
why it’s important. 

Beehive’s book is an adequate user’s 
manual, but it doesn’t provide compelling 
commentary on why Zope works the way it 
does. This is unfortunate, because Zope has 
some extraordinary features and a compelling 
design. However, because of the lack of good 
documentation in this area, most people must 
discover Zope’s benefits on their own. Readers 
are ready for a solid book on Zope, and unfor¬ 
tunately, The Book of Zope isn’t it. >< 

Eugene writes, programs, and consults on a 
freelance basis. You can reach him at 
eekim(a)eekim.com. 
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Internet 2 ’s director of advanced applications is pushing the envelope of streaming 
content—at 2.4 Gbps. 


ACCESS 



A conversation with 
Internet2’s 
Ted Hanss 


J 


Streaming’s SeconcLComing 


It was years ago that we first heard of Internet 2 , the 

next-generation network being developed by academics 
separately from the public Internet, which could move IP traffic 
at blinding speeds. Since then, many of the commercial Inter¬ 
net’s promises have remained unrealized. Web Techniques 
caught up with Internet 2 ’s director of advanced applications, 
Ted Hanss, to find out what progress the new network has 
made in solving the problems of the old. 


WT: How did Internet2 come about? 

TH: In 1995, the National Science Foundation stopped 
supporting NSFnet, which had been the backbone for 
education for the previous several years. The commercial 
Internet was focused primarily on consumer, commodity 
services. So in October 1996, a group of 34 schools committed 
to recreating a leading edge infrastructure for exploring 
advanced applications for research and education. The 
Internet2 effort is now a not-for-profit organization with 
more than 300 members. Its efforts include a national 
OC-48 (2.4 Gbps) network, meetings and workshops, and 
many working groups covering applications, middleware, 
and network services. 

WT: Why call it Internet2 if usage is limited to educational 
institutions? What makes this different from other private 
networks that various companies have come up with? 

TH: Internet2 is specifically designed as an environment for 
exploring the future of Internet applications, services, and 
transport technologies. Through our corporate partners we 
pass on the innovations that are uncovered in Internet2 
activities to the broader Internet. It isn’t a private network 
for privacy or security purposes, but a test bed with a diverse 
mix of participants. 

WT: We’ve all heard about the gee-whiz feats, like 
uncompressed HDTV being transmitted over the network. 
But do these have real-world applications? 

TH: Uncompressed HDTV is a means of stressing the network, 
but there are real uses for uncompressed video. For example, 
compression adds latency that can cause problems with 
interactive applications. If you use lossy compression 
algorithms you can lose important data, which for health 
care applications—such as transmitting diagnostic images- 
isn’t acceptable. 

WT: As the director of advanced applications, what excites 
you about how Internet2 is being used? 

TH: The sharing of instruments, such as telescopes and 
microscopes—this lets students access devices that really 
enrich the education experience. Some students might not 


have access to these instruments until graduate school 
without the current efforts to put them online. 

WT: What other types of content, besides video broadcasts, 
are you using the Internet2 network to transfer? 

TH: There are very large data sets, up to multiple petabytes 
each, produced by physicists, astronomers, and other 
researchers. These require significant bandwidth to transfer 
them from their data instruments to the supercomputing 
resources that are required to process them and the storage 
systems that provide broad access to the data. 

WT: Can you explain something about the tele-immersion 
applications we’ve heard about, and what benefits they 
might have? 

TH: These are environments in which you’re completely 
enveloped in 3D displays. For example, CAVEs (CAVE Auto¬ 
mated Virtual Environments) are ten foot by ten foot rooms 
with rear projection on the walls and floors. You are no 
longer on the outside of the display looking in, but inside 
the display looking all around at your data. You can interact 
with everything, from simulations of galaxies to the tiny 
bones of the inner ear, in an environment that has great 
benefits for both research and education. By networking 
these environments together you can bring multiple people 
into this virtual space. 

WT: What else is on the horizon for Internet2? 

TH: We’re working on several things for 2002, including 
efforts in collaboration services, under the umbrella of 
something we call the Internet2 Commons; end-to-end 
performance, to assure participants that their applications 
work optimally; continued rollout of multicast, IPv6, 
and quality of service; and the deployment of middleware 
to further enable applications. One middleware example 
is Shibboleth, an environment of inter-institutional trust 
that allows authentication and authorization across 
campuses using your home institution’s login and pass¬ 
word. This will have an important benefit for sharing 
digital libraries, building collaboration environments, 
and so on. 

WT: Have you learned any lessons along the way? 

TH: We’ve learned that interactive applications are very 
challenging on a “best effort” network. Providing end-to- 
end performance for broadcast-quality videoconferencing, 
for example, has required us to deploy new measurement 
devices on the network, tune operating systems and 
applications, and use new techniques for configuring 
networks. >< 
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ii5 o o ciock m me morning and you're still waiting for an answer to the 4 
emails you sent Tech Support. No one has returned the cries of desperation you left on the answering 
service. The 24 hour support they supposedly offer is going to make you look bad tomorrow morning when 
your client does not understand why you can't deliver the products and services you've promised. Where do 
you turn when you're alone in the dark and your head is sore from banging it against the wall? 


At AIT, we know how you feel. We used to host our business with other companies. In fact, we used to be 
resellers. Our business depended upon the quality of service provided by our hosting partners. We've built 
AIT from experiences like yours and understand your needs. Five years ago we were building and operating 
websites at 3 am out of a garage. We've grown into a 90,000 sq. ft. facility and data center and are 160 
employees strong. We haven't forgotten how frustrating it is to try and run a business when no one seems 
to understand how crucial it is that you get some answers to your questions. 


If you're looking for a hosting company that understands what you need and cares about your success, then 
pick up the phone. We'll answer it. We'll help you get your sites online and working, even at 3 o'clock in the 
morning. 


We don't take your success for granted. We give you the tools to succeed. We keep our prices affordable so 
you can make a profit. Your success really depends on only 3 things: cost, products and services you offer, and 
support for those products and services. We guarantee that no other hosting company offers more features at better 
prices than AIT. What are you waiting for? 


Clarence E. Briggs III 
CEO, Founder 


ADVANCED INTERNET TECHNOLOGIES 

& COMMUNICATIONS, INC. 


An AIT Company 


I did it at http://aitcom.net/story 


We give you the tools to succeed. 
Use them yourself and resell to all 
of your clients for a profit. 

Website Design Tool 
FREE Shopping Carts 
FREE Secure Directories 
FREE PAL Membership 
eTools Office Suite (Auction, Chat. 

Web Based Email. BBS, Calendar, Banner Exchange) 

Unlimited POP Emails 
Servers Enabled for Wireless 


AIT offers a wide range of hosting solutions - Personal/Business/Reseller/Corporate 



Small 

Standard 

Advanced 

Corporate 

Your Hosting Solution 

Business Plan 

Business Plan 

Business Plan 

Business Plan 

(Server 1) 

(Server 2) 

(Server 3) 

(Server 4) 

Disk Space (can be customized) 

200 MB 

400 MB 

800 MB 

30 GB 

Max # of domains you can host 

N/A 

25 

75 

256 

Base Monthly Server Cost 

$18.95 

$59.95 

$149.95 

$359.95 

Max. per domain cost @ $2.00/domain/mo 

N/A 

$50.00 

$150.00 

$512.00 

Max. possible cost to you/ month 

$18.95 

$109.95 

$299.95 

$871.95 

Your monthly gross profit @ $19.95 domain 

N/A 

$498.75 

$1,496.25 

$5,107.20 

Your monthly net profit reselling hosting 

N/A 

$388.80 

$1,196.30 

$4,235.25 

Additional Profit Reselling AIT Extras* 

N/A 

$1,250.00 

$3,750.00 

$12,800.00 

Total Monthly Profit 

N/A 

$1,638.80 

$4,946.30 

$17,035.25 










































































Reach new profits, 
new customers and 
New Zealand. 



SIGN UP FOR OUR WEB HOSTING SOLUTIONS AND SAVE UP TO $850* 


Want to reach your goals? Try reaching out, with Interland. A leading provider of business-class hosting for small to medium size 
businesses. We'll help you reach new profits, new markets and newly found success. How? With an extraordinary range of online 
tools. Everything from Web hosting to e-commerce to marketing support. And if you call today, you'll save up to $850. So help 
your business reach its full growth potential. And help yourself to $850. 


Give your online business room to grow with our shared and dedicated Web hosting plans. 


INTERLAND'S TRUE ADVANCED PLAN 


INTERLAND'S ACCELERATOR 100 PLAN 

• Disk storage 300 MB 


• Disk storage 18 GB hard drive 

• Monthly transfer 10 GB 


• Monthly transfer 30 GB 

• 50 POP e-mail boxes 


• 150 POP e-mail boxes 

• Free installation 


• Free installation 

• Free month of hosting 


• 3 mo Free Web Trends: Analysis and 

• Free site FTP 


reporting for optimal Web site management 

• Interland's True Advanced Shared Plan 


• Inter and's Accelerator 100 Dedicated Plan 

starting at $49.95/mo. 


starting at $549.95/mo. 

SAVE up to $200* 


SAVE up to $850 


Call Interland at 1-800-359-6054 or visit lnterland.com 


* Interland's True Advanced Shared Plan savings valid only on a 12 mo. account with a monthly minimum of $49.95. Interland's 
Accelerator 100 Dedicated Plan savings valid only on a 12 mo. account with a monthly minimum of $549.95. Offer valid 
until 2/28/02. Promotions cannot be combined with any other Interland offers. Subject to credit approval, availability and other 
terms and conditions available on lnterland.com. ©2001 Interland, Inc. All Rights Reserved. 
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